Ticketfly Says 27 Million Accounts Compromised During 'Malicious' Attack (billboard.com) 11
Earlier this month, we reported of a "cyber incident" that compromised the systems of Ticketfly, a large ticket distribution service. We have now learned that roughly 27 million user accounts were compromised during the attack. The information includes names, addresses, email addresses and phone numbers; thankfully, no credit/debit card info and passwords were stolen. Billboard reports: Ticketfly's website is fully back online a week after being targeted by what it describes as a "malicious cyber attack," though its mobile app for iOS remains offline "as we continue to prioritize bringing up the most critical parts of the platform first." Following the hack, the company rolled out a network of temporary venue and promoter websites so that events, including Riot Fest and Celebrate Brooklyn, could continue selling tickets. The "vast majority" of the temporary sites are now live, the firm said. All passwords for both ticket buyers and venue/promoter clients were reset following the hack, though they found no evidence that they were accessed. "It is possible, however, that hashed values of password credentials could have been accessed," the site warned. "Hashing is a way of scrambling a piece of data, making it generally incomprehensible."
a "malicious cyber attack" (Score:4, Funny)
Re: (Score:1)
Exactly what I was thinking. If they don't tell me exactly how it's hashed, what algorithm, and if it's salted they might as well say the passwords were stolen too.
Re: (Score:2)
Clearly you should click on the haveibeenpwned link in that email and give them all your personal information so that they can protect you. Make sure you include all your credit cards. If you leave one out, who knows what could happen.
Alerted by Have I been pwned Before Ticketfly !! (Score:2)
Ticketfly has not yet contacted me. But my subscription to Troy Hunt's "Have I been pwned" sent an alert a week or so ago.
It's a WTF moment. I'd also like to see the data-dump so I can actually SEE what content the hacker grabbed.
Most critical was the description on their website announcement "offering a secure alternative." I guess previously it was an insecure product - but now they'll offer their website in another flavor.
idiots.
umm (Score:2)
Why the hell is 'malicious' in quotes in the title. Is it an ironic malicious?