Ticketmaster Breach Showcases SaaS Data Security Risks
ID: 5aab26e6-ec15-5312-beca-2b69a80638b1
STIX ID: report--5aab26e6-ec15-5312-beca-2b69a80638b1
Feed Name: Dark Reading
Recent breaches impacting Ticketmaster (Live Nation) and Santander appear to be caused by unauthorized access to databases hosted by a third‑party cloud provider—likely Snowflake—where attackers leveraged single‑factor or previously stolen credentials (potentially obtained via infostealers) to exfiltrate large datasets; the actor 'ShinyHunters' has claimed and offered the data for sale, and the incidents underscore failures in enforcing MFA, IP restrictions, and cloud security baselines.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
