HackingRetail & ConsumerRetailStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)PIILowContained

Ticketmaster Entertainment, Inc.

bd_e9e9b2d5155b036f · schema v1 · pii pii-v1

Severity

Low

Discovered

May 23, 2024

Filed

Jul 5, 2024

To disclose

6 weeks

Affected

Not disclosed

Linked

10 filings

Confidence

66%

Full breach record for Ticketmaster Entertainment, Inc. →2 incidents on file

Ticketmaster notified consumers of a data breach involving a third-party cloud database provider. Unauthorized access occurred between April 2 and May 18, 2024. Affected data included names, contact info, and potentially SSNs. Ticketmaster engaged experts, notified law enforcement, rotated passwords, and offered 1-year TransUnion identity monitoring.

J jump to incidentP pin to compareR raw source

Vermont clock⏱ VT AG >14 bday6 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 51 days

discovery → filing · 6 weeks / 43 days

Apr 2, 2024

Begins

May 23, 2024

Discovered

Jul 5, 2024

Filed

vs. sector median

3 wks faster

This filing is one of 10 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

Delaware State AGbd_270eb6419dac56142024-07-08 · +3dVerified
South Carolina State AGbd_2da6e0db70523db82024-06-28 · +7dVerified
Maine State AGbd_deb6d2a5bcc2b0c92024-06-28 · +7dVerified
Montana State AGbd_be89dbb70b4a08492024-06-27 · +8dVerified

Show 5 more filings ↓up to 34d gap

California State AGbd_bf0a03842a98127d2024-06-27 · +8dVerified
Indiana State AGbd_c57115259345cf712024-06-27 · +8dVerified
Oregon State AGbd_ce6ee95d5ed867772024-06-26 · +9dVerified
Washington State AGbd_1babfd28d1ac20952024-06-22 · +13dCandidate
Illinois State AGbd_8fc9f3485cb0e6562024-06-01 · +34dVerified by operator

Name: Ticketmaster Entertainment, Inc.
norm: ticketmaster entertainment
Domain: ticketmaster.com

Name: Ticketmaster Entertainment, Inc.
norm: ticketmaster entertainment
Domain: ticketmaster.com
Industry: Retail & Consumerllm

Discovered: May 23, 2024
Breach occurred: Apr 2, 2024 – May 18, 2024
Undetected for: 51 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 5, 2024
Affected individuals: Not disclosed
Data types: Identity (basic)PII
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain Compromise
Threat actor: External
Regulator citations: Cooperating with federal law enforcement authorities
Third party: via third-party data services provider
Initial access: supply_chain

During the incident: Investigating the incident with the assistance of outside experts
Contacted and cooperating with federal law enforcement authorities
Rotating passwords for all accounts associated with the affected cloud database
Reviewing access permissions
Increased alerting mechanisms deployed in the environment
Offering identity monitoring with TransUnion at no cost
Changes made: Rotating passwords for all accounts associated with the affected cloud database
Reviewing access permissions
Increased alerting mechanisms deployed in the environment
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(43 days from discovery to filing)
Compliance flags: VT AG >14 bday
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 10 states

View merged incident ↗

Illinois State AGJun 1 · first

Washington State AG+21d

Oregon State AG+25d

Montana State AG+26d

California State AG+26d

Indiana State AG+26d

South Carolina State AG+27d

Maine State AG+27d

Vermont State AG+34d · this page

Delaware State AG+37d

Pattern: first filing Jun 1 (IL), last Jul 8 (DE) — a 37-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2024-07-05-ticketmaster-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 5, 2024
Raw hash: 6f9e51384084a7824e7ca8a423f2620e22f809c28396b36fd5c4ef0d2c76573e

Linked disclosures

Regulatory filings (9) · sorted by filing gap

Reporting entityTicketmaster Entertainment, Inc.

Victim entityTicketmaster Entertainment, Inc.

Incidentdiscovered May 23, 2024

Stated responseInvestigating the incident with the assistance of outside experts

ComplianceVT AG >14 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov