The Shubert Organization, Inc.

On January 19, 2026, The Shubert Organization, Inc. experienced a brute force attack on its Telecharge ticketing website by an unknown cyber actor. The attacker accessed certain user accounts. The organization secured the website, deactivated affected accounts, and conducted an investigation. Customers were notified on March 20, 2026, and advised to change passwords if reused elsewhere.

On January 19, 2026, an unknown cyber actor performed a brute force attack on The Schubert Organization's ticketing website, Telecharge, accessing certain user accounts. The incident potentially exposed names, usernames, and passwords for 48 Vermont residents. Shubert deactivated affected accounts and notified residents on March 20, 2026.

THE SHUBERT ORGANIZATION, INC. filed a data-breach notice with the Illinois Attorney General in March 2026 (case 26-03-1085). The register records the breach as discovered on February 9, 2026. Personal information types reported: username password. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

The Shubert Organization, Inc. notified the NH AG of unauthorized access to employee email accounts between Feb 8-11, 2019, discovered Feb 11, 2019. One NH resident's name and SSN were potentially exposed. Shubert engaged forensic experts, provided 2 years of credit monitoring, and updated security training.

The Shubert Organization, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-04-11. 10 Massachusetts residents were affected. The report records the breach type as electronic.