HackingRetail & ConsumerRetailCustomer Data InvolvedIdentity (basic)MediumContained

Ticketmaster Entertainment, Inc.

bd_deb6d2a5bcc2b0c9 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 23, 2024

Filed

Jun 28, 2024

To disclose

5 weeks

Affected

1,001state residents only

Linked

9 filings

Confidence

64%

Full breach record for Ticketmaster Entertainment, Inc. →3 incidents on file

Ticketmaster LLC reported an external system breach (hacking) affecting a cloud database hosted by a third-party provider. Unauthorized access occurred between April 2, 2024, and May 18, 2024. The breach was discovered on May 23, 2024. Affected data included names and basic contact information. Over 1,000 individuals, including Maine residents, were affected. Ticketmaster engaged outside experts, cooperated with federal law enforcement, rotated passwords, and offered 12 months of identity monitoring via TransUnion.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered May 23, 2024 → Filed with AG Jun 28, 202436d ⏱ ME AG >30d5 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 51 days

discovery → filing · 5 weeks / 36 days

Apr 2, 2024

Begins

May 23, 2024

Discovered

Jun 28, 2024

Filed

vs. sector median

2 wks faster

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

South Carolina State AGbd_2da6e0db70523db82024-06-28Verified
Montana State AGbd_be89dbb70b4a08492024-06-27 · +1dVerified
California State AGbd_bf0a03842a98127d2024-06-27 · +1dVerified
Indiana State AGbd_c57115259345cf712024-06-27 · +1dVerified

Show 4 more filings ↓up to 10d gap

Oregon State AGbd_ce6ee95d5ed867772024-06-26 · +2dVerified
Washington State AGbd_1babfd28d1ac20952024-06-22 · +6dCandidate
Vermont State AGbd_e9e9b2d5155b036f2024-07-05 · +7dVerified
Delaware State AGbd_270eb6419dac56142024-07-08 · +10dVerified

Name: Ticketmaster Entertainment, Inc.
norm: ticketmaster entertainment
Domain: ticketmaster.com

Name: Ticketmaster Entertainment, Inc.
norm: ticketmaster entertainment
Domain: ticketmaster.com
Industry: Retail & Consumerllm

Discovered: May 23, 2024
Breach occurred: Apr 2, 2024 – May 18, 2024
Undetected for: 51 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 8, 2024
Affected individuals: 1,001state-resident count only
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Cooperating with federal law enforcement authorities
Initial access: exploit_public_facing

During the incident: Investigating this incident with the assistance of outside experts
Contacted and cooperating with federal law enforcement authorities
Rotating passwords for all accounts associated with the affected cloud database
Reviewing access permissions
Increased alerting mechanisms deployed in the environment
Changes made: Rotating passwords for all accounts associated with the affected cloud database
Reviewing access permissions
Increased alerting mechanisms deployed in the environment
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(36 days from discovery to filing)
Compliance flags: ME AG >30d · 36dME CRA notice due
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: May 23, 2024
→ Filed with AG: Jun 28, 2024
36d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: May 23, 2024 → Filed with AG: Jun 28, 2024	36d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 9 states

View merged incident ↗

Washington State AGJun 22 · first

Oregon State AG+4d

Montana State AG+5d

California State AG+5d

Indiana State AG+5d

South Carolina State AG+6d

Maine State AG+6d · this page

Vermont State AG+13d

Delaware State AG+16d

Pattern: first filing Jun 22 (WA), last Jul 8 (DE) — a 16-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/0d26b6dd-b466-4f2a-bec0-ec2ad0738583.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 28, 2024
Raw hash: b0eca41e3d8e0fb657ae7ab8d7c3603e093837c73def81b05299351c00d7b855

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entityTicketmaster Entertainment, Inc.

Victim entityTicketmaster Entertainment, Inc.

Incidentdiscovered May 23, 2024

Stated responseInvestigating this incident with the assistance of outside experts

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov