BreachForums Returns Just Weeks After FBI Seizure - Honeypot or Blunder?

BreachForums has resurfaced after a law-enforcement takedown and a user claiming the ShinyHunters handle is offering a 1.3 TB Ticketmaster dataset (allegedly 560 million customers) for sale; the report also confirms Ticketmaster/Live Nation suffered a breach likely tied to a third-party cloud environment. Investigations point to a suspected Snowflake-related compromise where a Lumma Stealer campaign exfiltrated ServiceNow credentials that bypassed 2FA, and other organizations (e.g., Santander) were similarly impacted; the situation includes uncertainty about actor identities and possible honeypot activity.