Ticketmaster Hack: Data of Half a Billion Users Up for Ransom | Hacker News Reader

Ticketmaster Hack: Data of Half a Billion Users Up for Ransom

ticketnews.com

40 pointsajdude9 comments

Nothing has changed since yesterday, so I will say again that this is not verified. And Ticketnews is not an official Ticketmaster site either.

The only credibility this story has is that an admin of a breach forum reposted the sale of data from a user who had no reputation on the forums. All the journalists who wrote about this acknowledged it to some extent, but I suppose it pays to be first on a bombshell headline.

The Australian Home Affairs is only looking into it.

I personally think we should wait on an official announcement because if this is real then Ticketmaster has to disclose the breach by law.

—-

EDIT: Two minutes after I wrote my comment, vx-underground provided new details:

https://x.com/vxunderground/status/1796063116574314642

> Based on data provided to us by the Threat Group responsible for the compromise, we can assert with a high degree of confidence the data is legitimate. Date ranges in the database appear to go as far back as 2011. However, some dates show information from the mid-2000's. Data shared with us includes:

- Full name - Email address - Address - Telephone number - Credit card number (hashed) - Credit card type, authentication type, etc - All user financial transactions

> NOTE: The data provided to us, even as a 'sample', was absurdly large and made it difficult to review in depth. We are unable to verify the authenticity of financial information. Briefly skimming the PII present in the dump, it appears authentic.

Wonder if the size of this breach will be used as evidence of consumer harm by their monopoly. If there were more competition in the market, there wouldn’t be one single treasure trove so enticing.

I’m pro-competition, but I suspect most people will have accounts with multiple/all competitors, resulting in lots of treasure troves

Thats not how any of this works.

Also, I dont think the case against them will get very far. The only people who benefit from them not existing is criminals. If your under thee illusion that the fees TM charges go to anyone other than the artists I dont know what to tell you.

The grift isnt the price, the grift is who you blame for it.

(Edit: I dont say this lightly, I used to work in the industry, its greedy fucks all the way down).

The artist gets the delivery fee to print your own ticket?

I thought of the monopoly suit is between live nation and ticketmaster and their control of venues.

Ouch! That's very bad for the people and the company. It should be a thing to have access and use one-time throw-away virutal credit cards. Newer online banks offer to create virtual credit cards on the fly.

Privacy.com offers that service to the US. Someone who's able to raise VC levels of funding could also build that on top of Stripe's issuing product.

If American merchants toggled the single 3DS switch this would become meaningless. But they care more about not losing conversions than your security.

My thoughts and prayers for the Nickelback fans outed by this breach.

Reply on news.ycombinator.com