5 ms·

vx-underground on Twitter, > Based on data provided to us by the Threat Group responsible for the compromise, we can assert with a high degree of confidence th

vx-underground on Twitter, > Based on data provided to us by the Threat Group responsible for the compromise, we can assert with a high degree of confidence the data is legitimate. Date ranges in the database appear to go as far back as 2011. However, some dates show information from the mid-2000's. > NOTE: The data provided to us, even as a 'sample', was absurdly large and made it difficult to review in depth. We are unable to verify the authenticity of financial information. Briefly skimming the PII present in the dump, it appears authentic. https://x.com/vxunderground/status/1796063116574314642 https://x.com/vxunderground/status/1796063116574314642 --- No official confirmation yet.

toomuchtodo 2y ago
SEC registrants are required to make a disclosure within 4 business days once a cybersecurity incident is deemed by the company to be material to a reasonable investor. https://www.sec.gov/news/statement/gerding-cybersecurity-disclosure-20231214 https://www.sec.gov/news/statement/gerding-cybersecurity-dis...
- toomuchtodo 2y ago
  Filing submitted: https://news.ycombinator.com/item?id=40543408 https://news.ycombinator.com/item?id=40543408 https://stackdiary.com/ticketmaster-confirms-data-breach-with-a-sec-filing/ https://stackdiary.com/ticketmaster-confirms-data-breach-wit... Filing: https://www.sec.gov/Archives/edgar/data/1335258/000133525824000081/lyv-20240520.htm https://www.sec.gov/Archives/edgar/data/1335258/000133525824...
- skilled 2y ago
  Yep! I am aware of this. All my previous comments on this specific story have been that this isn’t verified. Lots of major news sites pulled the trigger on the headline for nothing more than clicks. Some journalists say that Australian Home Affairs confirmed the breach… lol! They acknowledged the rumour, but that got spun as “verification”. Then again, maybe it’s lack of decent cybersecurity writers. I personally can’t stand this weaksauce writing with no fact checking and the nonchalant way of throwing companies under the bus.
  - Khaine 2y ago
    Ticketmaster has engaged the ACSC[1]. I doubt its a rumour. [1] https://www.linkedin.com/posts/aucyberseccoord_today-i-was-advised-by-ticketek-of-a-cyber-activity-7202272090547265536-z8Ta?utm_source=share&utm_medium=member_desktop https://www.linkedin.com/posts/aucyberseccoord_today-i-was-a...
    - cooperx 2y ago
      Ticketek != Ticketmaster. Tickettek is Australia's largest ticketing company and a competitor to Ticketmaster
      - Khaine 2y ago
        Weird, that Ticketek is also sending out emails that they have been compromised at the same time as Ticket Master
    - skilled 2y ago
      This story was initially circulated two days ago with a blanket statement of “AUS Home Affairs confirms the breach” - which at the time was false because they only acknowledged the rumour. Whether or not it’s a rumour based on speculation has nothing to do with it. It either is or it isn’t. There is no confirmation that it isn’t. -- Just to provide receipts: Home Affairs Department confirms cyber incident impacting Ticketmaster customers (https://www.abc.net.au/news/2024-05-29/ticketmaster-hack-allegedlyshinyhunter-customers-data-leaked/103908614 https://www.abc.net.au/news/2024-05-29/ticketmaster-hack-all...) - May 29th > The Department of Home Affairs said it is aware of a cyber incident impacting Ticketmaster customers in response to claims it is part of a data leak expected to impact millions of customers globally. How exactly "being aware" counts as "confirmation" in this case? Any other article (outside of those who used ABC Aus as a source) on this matter have specifically used words like "allegedly", "purported", etc. That's the only argument I am making.
      - Khaine 2y ago
        If you mean this article https://www.abc.net.au/news/2024-05-29/ticketmaster-hack-allegedlyshinyhunter-customers-data-leaked/103908614 https://www.abc.net.au/news/2024-05-29/ticketmaster-hack-all... It clearly says: A spokesperson from the Department of Home Affairs told the ABC it is "Working with Ticketmaster to understand the incident". Which is more than they are aware of a rumour
- juice_bus 2y ago
  > material to a reasonable investor. As long as the investor is hurt, right? The users are just collateral.
  - toomuchtodo 2y ago
    I don't make the rules, and it is unfortunate there is still a wide gap between current state and desired end state wrt citizen harm; to understand the rules is to leverage them to arrive at a desired outcome. Code for some hackers, legal and regulatory frameworks for others. Simply different syntax, runtimes, and exception handling.
  - ArnoVW 2y ago
    Any negative news that can influence the share price is material information. A hack, involving payment means, of 500M users is definitely material information. Also. As the excellent Matt Levine never ceases to repeat : everything is securities fraud. If you didn't state in your regular filings "our security is poor, we may get hacked", then you lied by omission.
  - SV_BubbleTime 2y ago
    Opposite. SEC 8K being enforced has been nothing but good overall. These companies were being hacked and it was hidden from you. Now, it’s open, embarrassing, and costly. So they’re taking security more seriously. If you are concerned about share price, buy the dip on hack.
  - mananaysiempre 2y ago
    The SEC’s job is the integrity of the securities market. The user would be the concern of a consumer rights authority (the FTC) or a privacy protection one (I don’t think the US has one of those on the federal level?). That the SEC is the way we learn about these things is nothing more than a relatively recent hack, and how widespread the damage from that hackery is going to be is not yet clear. (E.g. “money laundering” seemed like a reasonable hack for the first couple of decades, but these days banks have turned into an surveillance and enforcement apparatus with a presumption of guilt and no right of appeal.)
  - 2y ago

toomuchtodo 2y ago

SEC registrants are required to make a disclosure within 4 business days once a cybersecurity incident is deemed by the company to be material to a reasonable investor. https://www.sec.gov/news/statement/gerding-cybersecurity-disclosure-20231214 https://www.sec.gov/news/statement/gerding-cybersecurity-dis...

toomuchtodo 2y ago
Filing submitted: https://news.ycombinator.com/item?id=40543408 https://news.ycombinator.com/item?id=40543408 https://stackdiary.com/ticketmaster-confirms-data-breach-with-a-sec-filing/ https://stackdiary.com/ticketmaster-confirms-data-breach-wit... Filing: https://www.sec.gov/Archives/edgar/data/1335258/000133525824000081/lyv-20240520.htm https://www.sec.gov/Archives/edgar/data/1335258/000133525824...
skilled 2y ago
Yep! I am aware of this. All my previous comments on this specific story have been that this isn’t verified. Lots of major news sites pulled the trigger on the headline for nothing more than clicks. Some journalists say that Australian Home Affairs confirmed the breach… lol! They acknowledged the rumour, but that got spun as “verification”. Then again, maybe it’s lack of decent cybersecurity writers. I personally can’t stand this weaksauce writing with no fact checking and the nonchalant way of throwing companies under the bus.
- Khaine 2y ago
  Ticketmaster has engaged the ACSC[1]. I doubt its a rumour. [1] https://www.linkedin.com/posts/aucyberseccoord_today-i-was-advised-by-ticketek-of-a-cyber-activity-7202272090547265536-z8Ta?utm_source=share&utm_medium=member_desktop https://www.linkedin.com/posts/aucyberseccoord_today-i-was-a...
  - cooperx 2y ago
    Ticketek != Ticketmaster. Tickettek is Australia's largest ticketing company and a competitor to Ticketmaster
    - Khaine 2y ago
      Weird, that Ticketek is also sending out emails that they have been compromised at the same time as Ticket Master
  - skilled 2y ago
    This story was initially circulated two days ago with a blanket statement of “AUS Home Affairs confirms the breach” - which at the time was false because they only acknowledged the rumour. Whether or not it’s a rumour based on speculation has nothing to do with it. It either is or it isn’t. There is no confirmation that it isn’t. -- Just to provide receipts: Home Affairs Department confirms cyber incident impacting Ticketmaster customers (https://www.abc.net.au/news/2024-05-29/ticketmaster-hack-allegedlyshinyhunter-customers-data-leaked/103908614 https://www.abc.net.au/news/2024-05-29/ticketmaster-hack-all...) - May 29th > The Department of Home Affairs said it is aware of a cyber incident impacting Ticketmaster customers in response to claims it is part of a data leak expected to impact millions of customers globally. How exactly "being aware" counts as "confirmation" in this case? Any other article (outside of those who used ABC Aus as a source) on this matter have specifically used words like "allegedly", "purported", etc. That's the only argument I am making.
    - Khaine 2y ago
      If you mean this article https://www.abc.net.au/news/2024-05-29/ticketmaster-hack-allegedlyshinyhunter-customers-data-leaked/103908614 https://www.abc.net.au/news/2024-05-29/ticketmaster-hack-all... It clearly says: A spokesperson from the Department of Home Affairs told the ABC it is "Working with Ticketmaster to understand the incident". Which is more than they are aware of a rumour
juice_bus 2y ago
> material to a reasonable investor. As long as the investor is hurt, right? The users are just collateral.
- toomuchtodo 2y ago
  I don't make the rules, and it is unfortunate there is still a wide gap between current state and desired end state wrt citizen harm; to understand the rules is to leverage them to arrive at a desired outcome. Code for some hackers, legal and regulatory frameworks for others. Simply different syntax, runtimes, and exception handling.
- ArnoVW 2y ago
  Any negative news that can influence the share price is material information. A hack, involving payment means, of 500M users is definitely material information. Also. As the excellent Matt Levine never ceases to repeat : everything is securities fraud. If you didn't state in your regular filings "our security is poor, we may get hacked", then you lied by omission.
- SV_BubbleTime 2y ago
  Opposite. SEC 8K being enforced has been nothing but good overall. These companies were being hacked and it was hidden from you. Now, it’s open, embarrassing, and costly. So they’re taking security more seriously. If you are concerned about share price, buy the dip on hack.
- mananaysiempre 2y ago
  The SEC’s job is the integrity of the securities market. The user would be the concern of a consumer rights authority (the FTC) or a privacy protection one (I don’t think the US has one of those on the federal level?). That the SEC is the way we learn about these things is nothing more than a relatively recent hack, and how widespread the damage from that hackery is going to be is not yet clear. (E.g. “money laundering” seemed like a reasonable hack for the first couple of decades, but these days banks have turned into an surveillance and enforcement apparatus with a presumption of guilt and no right of appeal.)
- 2y ago