More than 500 million Ticketmaster customers may have had their personal information stolen in a cyberattack at Live Nation and now, that data is for sale on the dark web for a half-million dollars.
Live Nation said in a regulatory filing with the Securities and Exchange Commission that it first detected the breach on May 20 when it noticed "unauthorized activity within a third-party cloud database environment" that contained data primarily from its Ticketmaster subsidiary.
A week later, on May 27, "a criminal threat actor" on the dark web offered to sell the Ticketmaster data, according to the filing.
The group claiming to be behind the breach said it stole the data of some 560 million customers and offered to sell those details for $500,000. The data reportedly includes names, addresses, phone numbers and credit card details of Ticketmaster customers.
"We are working to mitigate risk to our users and the company, and have notified and are cooperating with law enforcement," Live Nation said. "As appropriate we are also notifying regulatory authorities and users with respect to unauthorized access to personal information."
Live Nation went on to say the breach was unlikely to have "a material impact on our overall business operations."
The company did not share any additional details, including the name of the third-party vendor, how the data was accessed or how much data was stolen. It also did not mention if the breach has been contained.
"We continue to evaluate the risks and our remediation efforts are ongoing," Live Nation said in the SEC filing.
The breach, which remains under investigation, was reported just days after the Department of Justice filed a federal lawsuit that accuses Ticketmaster and Live Nation of illegally monopolizing the live entertainment industry to the detriment of concertgoers and artists alike. The lawsuit seeks to structure how the company operates and includes breaking apart the two entities.