Thieves Access Names, Credit Cards, Addresses, And More After TicketMaster Data Breach

Anyone who has an account at TicketMaster should change their password settings, and check their bank accounts.

Jeremy Nation
METACERT
Published in
3 min readJun 29, 2018

--

Ticketmaster’s online sales-desk was breached according to a report from the company indicating that malicious software had been embedded in checkout pages for Ticketmaster UK and International. The malware affected people across Australia, New Zealand, France, Ireland, Germany, and Spain. In the UK alone it is estimated that approximately 40,000 UK residents were affected.

Recently, leaks of sensitive data held by companies such as this have put consumers on guard. Anyone who visited any Ticketmaster site between February 23, 2018 and June 23, 2018 might have had their personal data exposed. As a result of the breach, thieves skimmed data concerning physical and email addresses, credit card numbers, as well as Ticketmaster login information.

Ticketmaster said that the issue stemmed from malware that was discovered on a product hosted by a third party provider. That provider, Inbenta, responded to Ticketmaster’s allegations that its product was responsible for the breach by specifying that the code in question had been modified solely for Ticketmaster’s use; meaning that their other customers need not expect such a breach in their versions of Inbenta software. Further, Inbenta said it was unaware that Ticketmaster chose to implement the custom script on its payments page, a decision Inbenta claims it would have advised against.

After Ticketmaster publicized the malware issue, Monzo, a UK-based mobile banking service disclosed that it had first become aware of the issue with Ticketmaster as far back as April 2018. An investigation into 50 cases of fraud concluded that 70 percent of those reports involved customers who used credit cards to make purchases from Ticketmaster between December 2017 and April 2018.

Monzo expressed their concern of the possibility of a breach to Ticketmaster, however according to Monzo, on April 19, Ticketmaster told Monzo that it had not identified a breach at that time.

Users who believe they may be affected by the breach should immediately change their passwords. In addition it’s a good idea to check your bank account and be on the alert for phishing emails.

MetaCert builds powerful security tools that can protect you and your organization from phishing sites and malicious resources. We recommend you install our browser add-on for Chrome, Firefox, and Opera: Cryptonite. Not only does Cryptonite guard you against phishing sites, it also gives you the benefit of a visual indicator: a black shield that turns green when you go to a validated cryptocurrency related resource. Since there are so many scammers in the cryptocurrency ecosystem, this is just one of the effective ways we’re fighting back against phishing.

Cryptonite is powered by the MetaCert Protocol, a threat intelligence system for trust and reputation.

If you want to learn more about the MetaCert Protocol, ask questions and leave suggestions on both our White Paper and Technical Paper which we’ve published here on Medium and have made available for download in PDF form as well:

Download a PDF version of the White Paper.
Download a PDF version of the Technical Paper.

MetaCert is creating solutions for anti-phishing, child safety, brand protection, crypto-address verification, and news credibility with the MetaCert Protocol. You can find out more about the MetaCert Protocol by joining our Telegram community to stay up to date on our blockchain project. Remember to install Cryptonite, to protect yourself from phishing scams before it’s too late.

--

--