Ticketmaster Confirms Cloud Breach, Amid Murky Details

Live Nation/Ticketmaster disclosed unauthorized activity in a third-party cloud database (reported by community sources to be Snowflake) after the ShinyHunters group posted alleged user data for sale; the underground listing claimed names, emails, addresses and partial payment card details (reportedly ~560 million records) but Live Nation has not confirmed scope or data types. The report highlights credential theft (potentially via infostealer malware), attacker use of previously obtained credentials, and weak customer configuration (single-factor authentication) as contributing factors, while noting uncertainty about who originally accessed the data and whether ShinyHunters are the primary actor or a reseller.