Hacker leaks Ticketmaster, Ticketek customer data after ransom demands ignored

A hacker known as Sp1d3r has leaked data stolen from the recent Ticketmaster and Ticketek breaches on a popular hacking forum. The move came after both companies ignored alleged ransom demands.

The posts on June 20 contain sensitive information from millions of customers and highlight significant cybersecurity concerns. Sp1d3r, who may be associated with the ShinyHunters hacking group, expressed frustration over Ticketmaster’s lack of response to an offer to sell the stolen data.

"Ticketmaster will not respond to requests to buy data from us," Sp1d3r complained. "They care not for the privacy of 680 million customers, so give you the first one million users free." The initial post included a sample of the data, revealing customer management information, names, birthdates, email and IP addresses, credit card details, and more.

Forum users could access the full dataset by replying to the post, although the data link is inactive. Six hours later, Sp1d3r posted additional data, this time targeting 30 million TEG customers, Ticketek’s parent company. While this dataset did not include credit card details, it contained names, genders, email addresses, hashed passwords, and customer IDs.

Ticketmaster and Ticketek confirmed significant data breaches this month, likely due to misconfigured Snowflake database servers. Ticketek notified its customers of the breach on May 31, stating that the hack occurred on a cloud platform hosted by a reputable third-party supplier. Ticketek reassured customers that all passwords were securely encrypted and that a separate payment system handled credit card transactions. However, names, birthdates, and email addresses may have been compromised.