OT: Ticketmaster hacked. Data breach of over half a billion users.

[GP2]

Obligatory **** Ticketmaster. If you've gone to a Raptors game, or almost any event under the sun that requires a ticket, you've probably used Ticketmaster. We all agree that they're scum, but for a company with this much of a footprint to have this scale of a data breach...it's inexcusable.

https://www.cyberdaily.au/security/10632-hackers-claim-ticketmaster-live-nation-data-breach-more-than-500m-compromised

An infamous hacking collective claims to have 1.3 terabytes of customer data stolen from the entertainment giant...

The ShinyHunters hacking group has shared the details of an alleged hack of Ticketmaster and Live Nation and is selling the data for a one-time price of US$500,000.

The data is for sale on a popular clear web hacking forum, and ShinyHunters claims to have the details of 560 million Ticketmaster customers in 16 different folders and files, each dozens of gigabytes in size.

The hackers also shared a sample of the data, which includes hashed credit card numbers, the last four digits of credit cards, credit card expiration dates, and fraud details, as well as customer names, addresses, and emails.

“560 million customers full details (name, address, email, phone),” ShinyHunters said in its post. “Ticket sales, event information, order details.”

The group is named after the Pokémon video game franchise.

Spoiler:

[OakleyDokely]

another win for monopolies

[DG88]

Sigh for all the money they make they could spend enough to enhance their security smh. I'd advise everyone to monitor your credit card for any suspicious transactions.

[UnRealGM]

cant wait to see another ticket surcharge line, $11.50 for Data Security

[refshateRaps]

Another complex 10 digit password update and 8 step verification to tie in and track as much info as much in as possible should fix it lol

Wouldn't shock me if many of these hacks are inside baseball

[2019nbachamps]

Class action in 3...2...

[WuTang_CMB]

hate them

[Duffman100]

Class action in 3...2...

Hope it's like LifeLabs.

Got my solid 8 dollars yesterday. Price for my data.

[Fairview4Life]

Sigh for all the money they make they could spend enough to enhance their security smh. I'd advise everyone to monitor your credit card for any suspicious transactions.

At least it's hashed CC info for the most part.

[OakleyDokely]

funny thing is, I just recently had to change my CC because of charges I didn't make.

[Martin1465]

They make it nearly impossible to delete your account.

[Scase]

Class action in 3...2...

Hope it's like LifeLabs.

Got my solid 8 dollars yesterday. Price for my data.

Man, I don't even care about the money, give it to a charity, underfunded gov program, etc. Just make the penalty severe, they pulled in a record 22.7bn in revenue last year, we need laws passed that have fines attached to things like data leaks, and they need to be a significant percentage of revenue, not profit, but revenue. On top of the lawsuits.

Lets see how often this happens when it costs them 2bn. IMO all fines should be revenue/salary/income based, until then, it's only a penalty for the poor.

[2019nbachamps]

Class action in 3...2...

Hope it's like LifeLabs.

Got my solid 8 dollars yesterday. Price for my data.

No wonder you've been in such a chipper mood lately

[Duffman100]

Class action in 3...2...

Hope it's like LifeLabs.

Got my solid 8 dollars yesterday. Price for my data.

No wonder you've been in such a chipper mood lately

Free americano from Starbucks!

[NBA Sheady]

As a software engineer, I can say the sad reality is nothing is unhackable. That said I wouldn't be even slightly surprised to find out their security is garbo.

Just watched the Ashley Madison doc and learned that for the amount of money they made in 1 day they could have hired the best ID Security firm in the world. Instead, they lied about security measures that didn't exist.

[douggood]

we really need a system of disposable profiles (provided profile by credit card company who has the real info)/ something like "hide my email" apple has

so instead of being hacked and data stolen potentially stollen from dozens of websites, there would only be one place to get hacked to get your true info (credit card company)

[DelAbbot]

Eventually all big corps will be hacked, and all your info will be on the web. Don't fret it.

Just call your credit card company to issue new number + replacement card.

[Scase]

As a software engineer, I can say the sad reality is nothing is unhackable. That said I wouldn't be even slightly surprised to find out their security is garbo.

Just watched the Ashley Madison doc and learned that for the amount of money they made in 1 day they could have hired the best ID Security firm in the world. Instead, they lied about security measures that didn't exist.

I'm a Director of Product for a company that acquires independently created apps, and some of the security I've seen (or not seen) is mind boggling. While absolutely no system is unhackable, based on my experience, I would say they had **** infrastructure, rather than some borderline impregnable setup that a world class group got through

Especially these bigger companies, the amount of times I've have VPs and C levels say it's a low priority, I've lost count.

"Our endpoints are exposed, we need to deal with that."
"Yeah but how easily can someone find this stuff out."
"Just by using inspect on Chrome."
"No one really knows how to do that, we'll be fine."

[Scase]

we really need a system of disposable profiles (provided profile by credit card company who has the real info)/ something like "hide my email" apple has

so instead of being hacked and data stolen potentially stollen from dozens of websites, there would only be one place to get hacked to get your true info (credit card company)

There are companies that allow you to create "burner" credit cards, but they don't exist/operate in canada. You also still need to have them have access to your actual CC info, so at some point along the way, someone has access to it and it can leak.

[DelAbbot]

As a software engineer, I can say the sad reality is nothing is unhackable. That said I wouldn't be even slightly surprised to find out their security is garbo.

Just watched the Ashley Madison doc and learned that for the amount of money they made in 1 day they could have hired the best ID Security firm in the world. Instead, they lied about security measures that didn't exist.

I'm a Director of Product for a company that acquires independently created apps, and some of the security I've seen (or not seen) is mind boggling. While absolutely no system is unhackable, based on my experience, I would say they had **** infrastructure, rather than some borderline impregnable setup that a world class group got through

Especially these bigger companies, the amount of times I've have VPs and C levels say it's a low priority, I've lost count.

"Our endpoints are exposed, we need to deal with that."
"Yeah but how easily can someone find this stuff out."
"Just by using inspect on Chrome."
"No one really knows how to do that, we'll be fine."

Security is a cost center. "Who cares?"