HackingRetail & ConsumerRetailStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)MediumContained

Ticketmaster Entertainment, Inc.

bd_2da6e0db70523db8 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 23, 2024

Filed

Jun 28, 2024

To disclose

5 weeks

Affected

1,000state residents only

Linked

9 filings

Confidence

64%

Full breach record for Ticketmaster Entertainment, Inc. →3 incidents on file

Ticketmaster, LLC notified South Carolina of a data breach involving unauthorized access to a third-party cloud database between April 2 and May 18, 2024. Personal information including names and contact details was potentially compromised. Ticketmaster engaged outside experts, cooperated with federal law enforcement, rotated passwords, and offered 1 year of identity monitoring via TransUnion.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 51 days

discovery → filing · 5 weeks / 36 days

Apr 2, 2024

Begins

May 23, 2024

Discovered

Jun 28, 2024

Filed

vs. sector median

2 wks faster

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Maine State AGbd_deb6d2a5bcc2b0c92024-06-28Verified
Montana State AGbd_be89dbb70b4a08492024-06-27 · +1dVerified
California State AGbd_bf0a03842a98127d2024-06-27 · +1dVerified
Indiana State AGbd_c57115259345cf712024-06-27 · +1dVerified

Show 4 more filings ↓up to 10d gap

Oregon State AGbd_ce6ee95d5ed867772024-06-26 · +2dVerified
Washington State AGbd_1babfd28d1ac20952024-06-22 · +6dCandidate
Vermont State AGbd_e9e9b2d5155b036f2024-07-05 · +7dVerified
Delaware State AGbd_270eb6419dac56142024-07-08 · +10dVerified

Name: Ticketmaster Entertainment, Inc.
norm: ticketmaster entertainment
Domain: ticketmaster.com

Name: Ticketmaster Entertainment, Inc.
norm: ticketmaster entertainment
Domain: ticketmaster.com
Industry: Retail & Consumerllm

Discovered: May 23, 2024
Breach occurred: Apr 2, 2024 – May 18, 2024
Undetected for: 51 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 1,000state-resident count only
Data types: Identity (basic)
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain CompromiseT1078 Valid Accounts
Threat actor: External
Regulator citations: Cooperating with federal law enforcement authorities
Initial access: supply_chain

During the incident: Investigating this incident with the assistance of outside experts
Contacted and are cooperating with federal law enforcement authorities
Rotating passwords for all accounts associated with the affected cloud database
Reviewing access permissions
Increased alerting mechanisms deployed in the environment
Changes made: Technical and administrative steps to further enhance the security of our systems and customer data
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(36 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 9 states

View merged incident ↗

Washington State AGJun 22 · first

Oregon State AG+4d

Montana State AG+5d

California State AG+5d

Indiana State AG+5d

Maine State AG+6d

South Carolina State AG+6d · this page

Vermont State AG+13d

Delaware State AG+16d

Pattern: first filing Jun 22 (WA), last Jul 8 (DE) — a 16-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Security%20Breach%20Notices/2024/TicketmasterLLC.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 28, 2024
Raw hash: 4e9539004c234513a03f258a720111e26b75fb7d7ae2e8cdb936c3364c5f451f

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entityTicketmaster Entertainment, Inc.

Victim entityTicketmaster Entertainment, Inc.

Incidentdiscovered May 23, 2024

Stated responseInvestigating this incident with the assistance of outside experts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov