Ticketmaster Data Breach: 560 Million Customers' Data Stolen

In May 2024, the hacking group ShinyHunters claimed to have stolen 1.3 terabytes of data from Ticketmaster and its parent company Live Nation — affecting an estimated 560 million customers worldwide. If you received a Ticketmaster data breach notification letter or email, your personal and financial information may have been exposed. Here is what you need to know.

What Happened?

ShinyHunters announced the breach on May 20, 2024, on a notorious cybercrime forum, offering the stolen data for sale for $500,000. Live Nation confirmed the breach on May 31, 2024, in an SEC filing, acknowledging that a criminal threat actor had obtained data from a third-party cloud database environment — later identified as Snowflake, a cloud data storage provider.

This breach was not caused by a vulnerability in Ticketmaster's own network alone, but rather through compromised credentials that allowed attackers access to Ticketmaster's cloud-hosted data. This distinction matters legally — companies have an obligation to protect data regardless of where it is stored.

What Data Was Compromised?

Based on information published by the threat actors and confirmed in part by Ticketmaster, the stolen data includes:

Full names
Home addresses
Phone numbers
Email addresses
Partial payment card data (last four digits and expiration dates)
Order histories and event details
Encrypted credit card details (which may be decryptable)
Fraud-related data for some users

The breadth of this dataset — combining contact information with purchase history and partial payment data — creates significant risk for phishing attacks and social engineering fraud.

Steps to Take If You Received a Ticketmaster Breach Notice

Watch for phishing attempts. Criminals with your purchase history can craft highly convincing fake emails about ticket refunds, event cancellations, or account verification. Treat any Ticketmaster-related email with caution and go directly to the Ticketmaster website rather than clicking links.
Review your payment cards linked to your Ticketmaster account for unauthorized charges and notify your bank immediately if you see any.
Change your Ticketmaster password and any other accounts where you use the same or a similar password.
Enable multi-factor authentication on your email account and any financial accounts.
Keep the notification letter or email as documentation of your affected status.

The Class Action Lawsuits

Multiple class action lawsuits were filed against Live Nation and Ticketmaster in the weeks following the breach disclosure. These lawsuits allege that Live Nation failed to implement adequate security measures to protect customer data and was too slow to notify affected customers.

As a named affected customer, you may be eligible to participate in one of these class action claims. Participation is typically free and requires no upfront costs — attorneys are compensated only if a settlement or judgment is reached.

Frequently Asked Questions

How many U.S. customers were affected?

The breach affected users globally. The majority of Ticketmaster's customer base is in the United States, and early estimates suggested tens of millions of U.S. customers were included in the compromised dataset.

Does this affect StubHub or other ticket platforms?

This breach is specific to Ticketmaster and Live Nation platforms. If you used StubHub, SeatGeek, or other services, your data there was not affected by this particular breach.

Do I need to have suffered actual financial loss to join the lawsuit?

No. In many data breach class actions, the exposure of your personal data itself constitutes a compensable harm. You do not need to demonstrate that you were a victim of fraud as a result of this specific breach in order to be eligible.