HackingRetail & ConsumerRetailCustomer Data InvolvedPCIFinancial accountIdentity (basic)LowContained

GoTickets

bd_ec69dbc389f396f7 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Jun 20, 2012

To disclose

—

Affected

Not disclosed

Linked

3 filings

Confidence

62%

Full breach record for GoTickets →3 incidents on file

Gotickets, Inc. notified customers that an unknown outside group improperly accessed its database between May 22 and May 30, 2012, potentially exposing payment card information, shipping, and billing data. The company engaged law enforcement (FBI, U.S. Attorney's Office) and provided fraud resolution services via Identity Theft 911.

J jump to incidentP pin to compareR raw source

Incident timeline

May 22, 2012

Begins

Jun 20, 2012

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

New Hampshire State AGbd_245ed5151d4197a12012-06-20Verified
Massachusetts State AGbd_3e29ea1bcd1efbbc2012-06-25 · +5dVerified

Name: GoTickets
norm: gotickets
Domain: gotickets.com

Name: GoTickets
norm: gotickets
Domain: gotickets.com
Industry: Retail & Consumerllm

Discovered: —
Breach occurred: May 22, 2012 – May 30, 2012
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PCIFinancial accountIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Working very closely with law enforcement, including the F.B.I. and U.S. Attorney’s Office

During the incident: Retained a company to help with any questions or problems
Working very closely with law enforcement, including the F.B.I. and U.S. Attorney’s Office, to investigate the situation
Providing its customers with highly experienced fraud resolution experts, along with support services — at no cost to affected individuals
Providing services through Identity Theft 911, a company that specializes in fraud resolution and identity theft education
Established a Gotickets Response Team at [REDACTED-PHONE]
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

New Hampshire State AGJun 20 · first

California State AGJun 20 · first · this page

Massachusetts State AG+5d

Pattern: first filing Jun 20 (NH), last Jun 25 (MA) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-32074
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 20, 2012
Raw hash: 95c002bb599cc3668f8082d518a32022d6a157dbaf2b46be939741ee0cdd8376

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityGoTickets

Victim entityGoTickets

IncidentUnauthorized Access

Stated responseRetained a company to help with any questions or problems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov