Ticketmaster Data Breach Lawsuit

Ticketmaster Data Breach Class Action Lawsuits

In May 2024, Live Nation, the parent company of Ticketmaster, reported to the U.S. Securities and Exchange Commission that its cloud-based data storage and analytics service provider, Snowflake Inc., had been hacked, releasing sensitive and personally identifiable information of over 560 million customers.

The Ticketmaster data breach included approximately 1.3TB of data, which included the names, home addresses, email addresses, phone numbers, and credit card details, including expiration dates, of customers.

Individuals are now filing Ticketmaster data breach class action lawsuits against Ticketmaster, Live Nation and Snowflake, Inc. for failing to take appropriate action to safeguard their current and former customers’ data, who have become victims, or are now at risk of identify and financial fraud.

Who Qualifies for the Ticketmaster Class Action Lawsuit?

To qualify for the Ticketmaster data breach class action lawsuits, you need to be either a current or former Ticketmaster customer whose personal information, including Ticketmaster user data, was compromised as a result of the data breach.

Individuals who have received a notification from Live Nation or Ticketmaster about any of their personal information being stolen due to the recent data breach may be eligible to join the lawsuit. If you have not received a Ticketmaster data breach notice letter, you may still be eligible.

How to Sign Up for the Ticketmaster Data Breach Lawsuit

To sign up for the Ticketmaster class action lawsuit, fill out the form below including details about your potential claim for review by a lawyer to determine whether a settlement or lawsuit payout may be available.

Ticketmaster Confirms Data Breach in SEC Filing

On May 31, 2024, Ticketmaster submitted a formal data breach notice to the U.S. Securities and Exchange Commission (SEC), as part of its compliance obligations under federal securities laws. Ticketmaster, being part of the publicly traded entity Live Nation Entertainment, is required to disclose any incidents that could potentially affect their financial condition or operational capabilities.

According to the notice, the unauthorized access occurred between April 2, 2024, and May 18, 2024. Ticketmaster discovered the breach when they detected suspicious activity in a cloud database managed by Snowflake Inc. The compromised data included sensitive information related to ticket sales.

Snowflake Inc. is a cloud-based data warehousing company that provides data storage and analytics services. For Ticketmaster and Live Nation, Snowflake manages extensive data environments, facilitating the storage, processing, and analysis of customer data on a scalable cloud platform. This infrastructure supports Ticketmaster’s operations by handling vast amounts of transactional data efficiently.

What Information was stolen in the Ticketmaster Data Breach?

Ticketmaster’s investigation into the Snowflake data breach has identified that hackers stole the following customer information;

• Names
• Home addresses
• Emails
• Phone numbers
• Credit card information
• Ticket purchases details
• Other personal information

Was Ticketmaster data breach information sold on the dark web?

The stolen data from the Ticketmaster data breach was offered for sale on dark web forums by a group known as “Shiny Hunters.” The data was posted for sale for $500,000 USD.

Ticketmaster customers’ stolen data, including personal identifiable information (PII) such as names, addresses, and credit card details, was reportedly offered for sale on a dark web site known as Breach Forums. This site is associated with the hacking group ShinyHunters, which has been implicated in several high-profile data breaches.

Ticketmaster Data Breach Notice to Customers

The service provider reportedly began sending Ticketmaster data breach notice letters (PDF) to customers in late June 2024 via first class mail or email, informing individuals of the breach and offering limited fraud protections.

According to the Ticketmaster data breach notice letters, the company is instructing customers to remain vigilant and take steps to protect against identity theft and fraud, including monitoring your accounts, account statements, and free credit reports for signs of suspicious activity. The notice also highlights the exposure of sensitive customer fraud details, which could facilitate targeted attacks by cybercriminals.

Customers with questions or concerns regarding the Ticketmaster data breach incident are being encouraged to contact the company at 1-800-653-1840 Monday through Friday from 8:00 a.m. to 8:00 p.m. Central Time.

Ticketmaster Offers Limited Credit and Fraud Protections

In the Ticketmaster data breach notices being issued to an undisclosed number of customers, Ticketmaster is offering those impacted limited identity monitoring services through TransUnion.

Customers will only have 90 days to sign up for the TransUnion credit monitoring service from the date they receive their notice.

Below is a guide on how to sign up for the Ticketmaster data breach free credit monitoring service through TransUnion.

• Notice and Code: Ensure you have your Ticketmaster notice, which includes a unique activation code—usually a string of capitalized letters found at the bottom of the first page.
• Website Activation:
  • Visit www.mytrueidentity.com.
  • Enter the activation code in the “Enter Activation Code” text box.
  • Click “Activate Now.”
• Personal Information Entry:
  • Fill in your name, phone number, and email.
  • Choose a password and click “Continue.”
  • Enter any additional required information.
  • Click “Accept and Continue.”
• Identity Verification:
  • Verify your identity with the passcode sent to you by the service.
  • Upon successful verification, access your dashboard displaying your credit report and alerts.
• Troubleshooting:
  • If encountering issues (such as error notifications about processing your request), try clearing your browser’s cache as recommended by TransUnion.

Ticketmaster recommends that customers continue to monitor their credit and bank accounts for signs of suspicious activity.

Ticketmaster Data Breach Risks to Customers

The theft of over 560 million Ticketmaster customers’ personal information during the data breach exposes individuals to a range of fraud risks, affecting both their financial security and personal identity:

Names and Home Addresses: These details can be used to forge identities or commit fraud, such as applying for loans or credit cards in someone else’s name. Access to a home address could also lead to direct mail scams or even physical threats like burglary.

Emails and Phone Numbers: With access to email addresses and phone numbers, criminals can launch phishing attacks, send scam messages, or impersonate legitimate entities to solicit additional personal information, potentially leading to account takeovers.

Credit Card Information: Stolen credit card details are a direct gateway to financial theft. Criminals can use even partial payment card data for unauthorized purchases or sell it on the dark web, where it can circulate among other criminals for various fraudulent activities.

Ticket Purchase Details: Knowledge of past ticket purchases or event details can help scammers tailor their approaches, making fraudulent communications more convincing by referencing specific events or interests.

Other Personal Information: Additional data such as birthdates or even customer fraud details can help hackers bypass security measures on accounts, allowing for deeper identity theft, including the creation of new, fraudulent identities or alteration of existing account details.

Ticketmaster Data Breach Class Action Lawsuits

In the weeks following the Ticketmaster data breach announcement, a series of Ticketmaster class action lawsuits have been filed seeking to represent millions of customers whose information was stolen.

The Ticketmaster class action lawsuits claim Ticketmaster, Live Nation and Snowflake Inc. failed to properly secure consumers’ sensitive information. The lawsuits claim the one year fraud protections being offered are not sufficient, and that the private information accessed by the hackers presents financial risks for affected consumers for the rest of their lives.

Given the growing number of class action lawsuits filed against Ticketmaster and Snowflake, Inc. over the data breach, a motion was filed with the U.S. Judicial Panel on Multidistrict Litigation on July 29, calling for all lawsuits stemming from the Snowflake data breach, including the 560 million Ticketmaster customers, be consolidated in the U.S. District Court for the District of Montana for coordinated pretrial proceedings before one judge.

At the time the motion was filed, at least 14 Snowflake-related data breach lawsuits had been filed, with almost all of them in the District of Montana, where Snowflake is headquartered. In addition, there are 48 related actions pending in 11 other district courts nationwide.

If the JPML chooses to consolidate the data breach lawsuits before one judge, pretrial proceedings will be coordinated to avoid duplicative discovery into common issues in the cases, and the court will likely establish a bellwether program where a small group of cases will be prioritized, to help gauge how juries may interpret expert testimony and evidence likely to be used in thousands of trials.

Allegations Raised in Ticketmaster Lawsuits

The allegations raised in the data breach lawsuits claim that Live Nation and Ticketmaster failed properly handle customers data, claiming:

Negligence: Plaintiffs argue that Ticketmaster had full knowledge of the types of personal information they collect and the types of harm that Plaintiffs and Class Members would suffer if that data was accessed and exfiltrated by an unauthorized third-party, yet negligently failed to implement and maintain adequate security measures.

Breach of Contract: The lawsuits also allege that Ticketmaster breached their contractual obligations to customers by failing to adequately secure their personal data, which is typically stipulated in service agreements.

Unjust Enrichment: Lawsuits accuse Ticketmaster of unjust enrichment, claiming that the company benefited financially from avoiding the costs associated with implementing adequate security measures.

Violations of Consumer Protection Laws: Plaintiff’s claim that Ticketmaster’s actions violated specific state consumer protection laws by failing to safeguard consumer data adequately.

Examples of Ticketmaster Data Breach Lawsuits

Ticketmaster Data Breach Class Action Lawsuit: Cynthia Ryan and Rosalia Garcia filed a Ticketmaster class action lawsuit in the U.S. District Court for the Central District of California on May 29, 2024, seeking class action status to pursue damages for all impacted customers from Ticketmaster and Live Nation Entertainment, Inc. who were named as defendants.

The class action lawsuit against Ticketmaster attributes the breach to inadequate security measures for protecting consumer data and criticizes the company for its delayed response in notifying affected individuals. The lawsuit highlights the long-term financial risks posed by the breach, stressing that the compromised personal information could threaten the financial security of consumers indefinitely.

Class Action Lawsuit Against Ticketmaster and Snowflake: James Curry and David Freifeld filed a class action lawsuit against Ticketmaster in the U.S. District Court for the Central District of California on June 7, 2024, claiming that they have experienced emotional distress and had to take extra efforts to secure their finances and accounts as a result of the Ticketmaster data breach.

Contact a Ticketmaster Data Breach Lawyer

Ticketmaster data breach lawyers are providing free consultations and claim evaluations for individuals who have had their identifies stolen or suffered losses due to the Snowflake data breach.

To determine whether you or a loved one may be eligible for an Ticketmaster data breach lawsuit settlement, submit information about your potential claim for review by a lawyer to determine whether a settlement or lawsuit payout may be available. There are no fees or expenses unless a recovery is obtained in your case.