Security Experts:

Personal Data Compromised in Ticketfly Hack

Ticketfly hacked

Eventbrite-owned ticket distribution service Ticketfly shut down its website on Thursday after it was defaced by a hacker who calls himself “IsHaKdZ.”

The Ticketfly website was defaced with a message that read, “Ticketfly HacKeD By IsHaKdZ. Your Security Down im Not Sorry. Next time I will publish database ‘backstage’ (sic).” The defacement page also included links to files containing personal information, such as names, physical addresses, phone numbers and email addresses.

The data breach also seems to impact some music venues, whose websites also displayed the same message from the attacker.

Websites of several music venues hacked via Ticketfly

On its support website, Ticketfly said the hacker gained access to customer and client information.

As a result of the incident, individuals who have purchased tickets via Ticketfly will have to print them out and bring a photo ID to the venue hosting the event – venues will be provided printed guest lists. People who have not purchased tickets themselves may need to show the original payment card used to buy the ticket, a copy of the original buyer’s ID, and an authorization note from the original buyer.

“Our investigation into the incident is ongoing. We’re putting all of our resources to confirm the extent of the unauthorized access. We're committed to communicating with all customers once we have more information about the scope of the issue,” Ticketfly told customers.

According to Motherboard, the hacker initially attempted to report the vulnerability to the vendor and asked for the payment of 1 bitcoin in return for the information. Since IsHaKdZ did not receive a reply from the company, he decided to exploit the flaw.

Motherboard confirmed that at least some of the thousands of records stored in the files leaked by the hacker are valid. The incident reportedly impacts Ticketfly customers and employees, and staff at music venues.

Related: Top Music Videos Including 'Despacito' Defaced by Hackers

Related: Pro-ISIS Hacking Group Continues Defacement Campaign

view counter
Eduard Kovacs (@EduardKovacs) is a contributing editor at SecurityWeek. He worked as a high school IT teacher for two years before starting a career in journalism as Softpedia’s security news reporter. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.