Ticketek Data Breach

In June 2024, Ticketek disclosed a data breach affecting approximately 17.6 million customer accounts. The exposed data included names, email addresses, phone numbers, dates of birth, and event attendance histories. The breach was attributed to unauthorized access to a third-party cloud-based data storage platform used by Ticketek. The company notified affected customers and advised them to be vigilant against phishing attempts.

Ticketek is one of Australia's largest ticketing companies, serving major venues and events across the country.

The breach occurred through a third-party cloud storage platform, suggesting a supply chain or misconfiguration vulnerability rather than a direct compromise of Ticketek's core systems.

Unknown threat actors targeting third-party cloud infrastructure.

Attribution sources

• Have I Been Pwned
• Ticketek statements

Countries affected

• Australia

Data types

• PII
• Names
• Email addresses
• Phone numbers
• Dates of birth
• Event attendance data

Regulatory scrutiny under Australian privacy law; reputational damage.

Public reaction

Significant concern among Australian event-goers over personal data exposure.

Political impact

Increased pressure for stronger data protection regulations in Australia.

OAIC investigation anticipated.

Significance

One of Australia's largest ticketing platform breaches.

Publishing organisations

• BleepingComputer
• Have I Been Pwned

Ticketek notified affected customers and secured the compromised cloud platform.

Official documents

• Ticketek data breach notification

References

1. [1]BleepingComputer: Ticketek data breach coverage