4 ms·
Nothing has changed since yesterday, so I will say again that this is not verified. And Ticketnews is not an official Ticketmaster site either. The only credib
by skilled 2y ago
Nothing has changed since yesterday, so I will say again that this is not verified. And Ticketnews is not an official Ticketmaster site either.
The only credibility this story has is that an admin of a breach forum reposted the sale of data from a user who had no reputation on the forums. All the journalists who wrote about this acknowledged it to some extent, but I suppose it pays to be first on a bombshell headline.
The Australian Home Affairs is only looking into it.
I personally think we should wait on an official announcement because if this is real then Ticketmaster has to disclose the breach by law.
—-
EDIT: Two minutes after I wrote my comment, vx-underground provided new details:
https://x.com/vxunderground/status/1796063116574314642 https://x.com/vxunderground/status/1796063116574314642
> Based on data provided to us by the Threat Group responsible for the compromise, we can assert with a high degree of confidence the data is legitimate. Date ranges in the database appear to go as far back as 2011. However, some dates show information from the mid-2000's. Data shared with us includes:
- Full name
- Email address
- Address
- Telephone number
- Credit card number (hashed)
- Credit card type, authentication type, etc
- All user financial transactions
> NOTE: The data provided to us, even as a 'sample', was absurdly large and made it difficult to review in depth. We are unable to verify the authenticity of financial information. Briefly skimming the PII present in the dump, it appears authentic.