A group of hackers say they have stolen the personal details of 560 million Ticketmaster customers.
ShinyHunters, the group claiming responsibility, says the stolen data includes names, addresses, phone numbers and partial credit card details from Ticketmaster users worldwide.
The hacking group is reportedly demanding a $500,000 ransom payment to prevent the data from being sold to other parties.
The Australian government says it is working with Ticketmaster to address the issue.
The FBI has also offered to assist, a spokesperson for the US Embassy in Canberra told Agence France-Presse.
The American website Ticketmaster, one of the largest online ticket sales platforms in the world, has yet to confirm whether it has experienced a security breach.
Cyber security experts are warning that the claims could be false but authorities in Australia, where it was first reported, have confirmed they are investigating.
An advert with some data samples allegedly obtained in the breach have been posted on the website BreachForums - a newly relaunched hacking forum.
ShinyHunters has been linked to a string of high-profile data breaches resulting in millions of dollars in losses to the companies involved.
In 2021 the group sold a genuine database of stolen information from 70 million customers of US telecoms firm AT&T. In September last year, almost 200,000 Pizza Hut customers in Australia had their data breached.
EPA. This latest alleged hack coincides with the relaunch of BreachForums, a site on the dark web where other hackers buy and sell stolen material, and information to enable hacks to take place.
Users of the forums often inflate the scale of their hacking to attract attention from other hackers.
They are often where large stolen databases first appear but can also feature false allegations and claims.
Individuals declaring large batches of data in the past have proven to be duplicates of previous hacks rather than newly stolen information.
The hack could be the most significant breach ever in terms of numbers and the extent of the data stolen.
This is not the first time Ticketmaster has been hit with security issues.
In 2020 it admitted it hacked into one of its competitors and agreed to pay a $10m fine.
In November it was allegedly hit by a cyber attack which led to problems selling tickets for Taylor Swift's Era's tour.
Earlier this month, US regulators sued Live Nation, Ticketmaster's parent company, accusing the entertainment giant of using illegal tactics to maintain a monopoly over the live music industry.
The lawsuit from the Department of Justice said the firm's practices had kept out competitors, and led to higher ticket prices and worse service for customers.
This Cyber News was published on packetstormsecurity.com. Publication date: Thu, 30 May 2024 14:13:05 +0000