HackingTechnologyInformationStolen CredentialsCapture Stored DataCustomer Data InvolvedTargetedFinancial accountIdentity (basic)LowActive

GoTickets

bd_245ed5151d4197a1 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Jun 20, 2012

To disclose

—

Affected

22state residents only

Linked

3 filings

Confidence

66%

Full breach record for GoTickets →3 incidents on file

Gotickets, Inc. notified the NH Attorney General of a security breach involving 22 NH residents. Unauthorized access to the gotickets.com database occurred between May 22-30, 2012, exposing payment card and shipping/billing data via compromised CMS credentials. Gotickets engaged the FBI and retained Identity Theft 911 for customer support. Remediation included stricter credential management.

J jump to incidentP pin to compareR raw source

Incident timeline

May 22, 2012

Begins

Jun 20, 2012

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

California State AGbd_ec69dbc389f396f72012-06-20Candidate
Massachusetts State AGbd_3e29ea1bcd1efbbc2012-06-25 · +5dVerified

Name: GoTickets
norm: gotickets
Domain: gotickets.com

Name: GoTickets
norm: gotickets
Domain: gotickets.com
Industry: Technologyllm

Discovered: —
Breach occurred: May 22, 2012 – May 30, 2012
Materiality determined: —
Notification sent: Jun 22, 2012
Affected individuals: 22state-resident count only
Data types: Financial accountIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Notified NH Attorney General
Initial access: valid_credentials

During the incident: Notified and has been working very closely with law enforcement, including the F.B.I. and U.S. Attorney’s Office, to investigate the situation
Retained Identity Theft 911, an organization that specializes in fraud resolution and identity theft education, to provide personalized one-one-one support services to all notified customers at no cost to the customers for a year following notification
Changes made: Implemented more stringent credential management which includes retirement of old user accounts and instituting more complex username/password combinations which expire every 90 days
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

California State AGJun 20 · first

New Hampshire State AGJun 20 · first · this page

Massachusetts State AG+5d

Pattern: first filing Jun 20 (CA), last Jun 25 (MA) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/gotickets-20120620.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 20, 2012
Raw hash: 27c421ad2884f00434a310b8ee37e39955f3b38f11c551d8d1f03e1cce0da3e8

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityGoTickets

Victim entityGoTickets

IncidentUnauthorized Access

Stated responseNotified and has been working very closely with law enforcement, including the F.B.I. and U.S. Attorney’s Office, to investigate the situation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov