Ticketmaster

Ticketmaster, a company that sells tickets for events, revealed that there was a data breach that resulted in the exposure of payment and personal customer information.

Hackers gained access to consumers' names, addresses, email addresses, phone numbers, payment information, and Ticketmaster login credentials.

The company claims that malicious code was put by attackers on a customer assistance product hosted by an outside third party, Inbenta Technologies.

Hackers gained access to a third-party customer support chat application that was installed on the UK website to obtain payment and personal information from ticket buyers.

Source: https://securityaffairs.com/73982/data-breach/ticketmaster-data-breach.html

TPRM report: https://scoringcyber.rankiteo.com/company/ticketmaster

"id": "tic451251223",
"linkid": "ticketmaster",
"type": "Breach",
"date": "06/2018",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Ticketing and Event Management',
                        'location': 'UK',
                        'name': 'Ticketmaster',
                        'type': 'Company'}],
 'attack_vector': 'Third-party customer support chat application',
 'data_breach': {'type_of_data_compromised': ['personal information',
                                              'payment information']},
 'description': 'Ticketmaster, a company that sells tickets for events, '
                'revealed that there was a data breach that resulted in the '
                'exposure of payment and personal customer information. '
                "Hackers gained access to consumers' names, addresses, email "
                'addresses, phone numbers, payment information, and '
                'Ticketmaster login credentials. The company claims that '
                'malicious code was put by attackers on a customer assistance '
                'product hosted by an outside third party, Inbenta '
                'Technologies. Hackers gained access to a third-party customer '
                'support chat application that was installed on the UK website '
                'to obtain payment and personal information from ticket '
                'buyers.',
 'impact': {'data_compromised': ['names',
                                 'addresses',
                                 'email addresses',
                                 'phone numbers',
                                 'payment information',
                                 'Ticketmaster login credentials']},
 'initial_access_broker': {'entry_point': 'Third-party customer support chat '
                                          'application'},
 'motivation': 'Data theft',
 'title': 'Ticketmaster Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Malicious code injection'}