Data breach reference · May 2024

The Ticketmaster data breach

What was disclosed, and how to check whether your address was in it.

At a glance
Disclosed
20 May 2024
Records
560,000,000 (Live Nation Investor Relations)
Type
Third-party cloud breach
Sector
General

Check whether your address was in it

No account needed. The address is used only to run the check. Privacy

This disclosure

What is on the record.

560,000,000
Records reported in the disclosure
880 days
Since the disclosure, 20 May 2024

Source: Live Nation Investor Relations, as recorded in the LeakTrace tracker.

What happened

In May 2024, threat actors claimed to have exfiltrated 1.3TB of customer data from a Ticketmaster cloud database hosted on a third-party provider. The company later confirmed the breach through an 8-K SEC filing.

Exposed data included names, addresses, phone numbers, email addresses, dates of birth, order histories, and partial payment card information (last 4 digits and expiration dates). Full card numbers were not exposed. The breach was attributed by security researchers to compromised credentials at a cloud-storage integration partner.

Reported impact: Data offered for $500K USD on hacker forum

Source: Live Nation Investor Relations, 20 May 2024.

What to do if you were affected

  1. Change your Ticketmaster password if you have not since May 2024.
  2. Enable two-factor authentication on your Ticketmaster account.
  3. Monitor your bank statements for unauthorized transactions.
  4. Watch for phishing emails referencing ticket refunds or event cancellations.
  5. If your phone number was exposed, add a port-out PIN with your mobile carrier.

Common questions

When was the Ticketmaster breach disclosed?
In May 2024. Public reporting was carried by Live Nation Investor Relations.
How many people were affected?
560,000,000 records, by the figure in the disclosure. Whether your own details were among them depends on your relationship with Ticketmaster at the time.
How do I check whether my address was in it?
Enter the address in the check above. We check that one address against monitored breach databases and show what was exposed and what to do first. No account needed.
Is the data still a risk years later?
Often, yes. Lists from old breaches keep being copied and reused, so a password from one can still be tried today. Changing it, and not reusing it, closes that door.

Other breaches in this sector

Dodo PizzaSep 2026 · 68,000,000 recordsLondon DrugsApr 2024 · 3,000,000 recordsSnowflake customer credential-stuffing: AT&T 73M recordsApr 2024 · 73,000,000 recordsIndigo BooksFeb 2023 · 60,000 records

Is your address in a public breach? Check my address →