Entertainment venue management firm Legends International warns it suffered a data breach in November 2024, which has impacted employees and people who visited venues under its management. Legends International is a global sports and entertainment services company offering venue planning, sales, partnerships, hospitality, merchandise, and technology solutions, with an annual revenue of over $1.1 billion. In the letter sent to impacted individuals, Legends International says security measures were already in place before the incident, and it implemented additional measures when the systems were restored from the cyberattack. In a notification letter shared with the authorities, the company informs that it detected unauthorized activity in its IT systems on November 9, 2024, prompting an investigation carried out with the help of external cybersecurity experts. Legends International states in the letter that they are not aware of any evidence that personal information has been misused as a result of this incident, but people are advised to remain vigilant. Bill Toulas Bill Toulas is a tech writer and infosec news reporter with over a decade of experience working on various online publications, covering open-source, Linux, malware, data breach incidents, and hacks. The investigation results confirmed that the intruders had exfiltrated personal data files, though the exposed data types aren’t determined in the sample letter. It manages over 350 venues across five continents, including the SoFi Stadium in Los Angeles, One World Observatory in New York, the AT&T Stadium in Texas, the Santiago Bernabeu and Camp Nou stadiums in Spain, and the Anfield and OVO Arena Wembley in the UK. At the time of writing this, no ransomware groups have taken responsibility for the attack at Legends International, so the type of the attack and the perpetrators remain unknown. However, given the size of the company’s operations and the large amounts of sensitive data it manages, there’s ground for concern. Letter recipients are offered 24-month coverage for identity theft detection services through Experian and are given until July 31, 2025, to enroll.
This Cyber News was published on www.bleepingcomputer.com. Publication date: Thu, 17 Apr 2025 20:55:09 +0000