Slashdot Mirror
Ticketmaster UK Admits Personal Data Stolen In Hack Attack (bbc.com)
An anonymous reader quotes a report from BBC: Ticketmaster has admitted that it has suffered a security breach, which the BBC understands has affected up to 40,000 UK customers. Malicious software on third-party customer support product Inbenta Technologies caused the hack, the firm said on Twitter. "Some personal or payment information may have been accessed by an unknown third party," it added. All affected customers have been contacted.
In the email to those customers, Ticketmaster said it had set up a website to answer any questions and advised them to reset their passwords. It also offered them a free 12-month identity monitoring service. It said the breach was likely to have only affected UK customers who purchased or attempted to purchase tickets between February and 23 June 2018. But, as a precaution, it said it had also informed international customers who had purchased or attempted to purchase tickets between September 2017 and 23 June 2018.
In the email to those customers, Ticketmaster said it had set up a website to answer any questions and advised them to reset their passwords. It also offered them a free 12-month identity monitoring service. It said the breach was likely to have only affected UK customers who purchased or attempted to purchase tickets between February and 23 June 2018. But, as a precaution, it said it had also informed international customers who had purchased or attempted to purchase tickets between September 2017 and 23 June 2018.
So, what if I publish all my data myself before the big boys lose it.
Can I then sue them for copyright infractions when they let a 3rd party have it? Since 'data protection' which seems more of a myth.
$10k a pop might be more incentive than $1 fines they seem to get.
Note that Ticketmaster UK handles processing for Ireland too, so if you've used ticketmaster.ie in the last 6 months, the advisory applies to you too.
(this is not a
And it reads
You got p0wned!
That was it.
ISIS has claimed responsibility, so lets go bomb someone.
That's like the worst kind of hack.
I've no axe to grind when it comes to Ticketmaster. Never used their services.
However, if companies are going to wake up to the importance of protecting the data they collect so voraciously, they need a good incentive to do so. Much as Ticketmaster won't like this, one useful way of approaching this would be that, if it can be shown that they were negligent, then to levy the absolute maximum that the GDPR will allow (4% of global turnover?) as a fine.
Sadly, the only way that companies will even think of taking the privacy of our data seriously is when it hits their share price and the performance bonuses as paid to their directors. When we make it absolutely, unmistakeably, crystal clear that loss of data like this will earn the maximum in fines, we might start to see companies taking our data a bit more seriously.
I don't know what's worse? Having your identity stolen, or being told that those monitoring services are any sort of "solution?"
Nope, it's still ticketmaster's fault for letting the horses bolt. Likewise BeauHD is still a poser and a wannabe editor.
Malicious software on third-party customer support product Inbenta Technologies caused the hack
The term "third party" suggests Inbenta operates the service and would be somehow liable. But if Ticketmaster operated it on its own, there is no Inbenta liability. The article is not clear about the situation.
It appears that Monzo (a UK online bank) noticed this breach through anomalous transactions on their cards as early as April 6th, notified TicketMaster about the possible issue immediately and started proactively replacing cards that had been used to make purchases through TicketMaster. Representatives from TicketMaster visited Monzo's offices on April 12th to gather further information - a whole week(!) after the initial notification - but then apparently denied finding evidence of a breach to Monzo a further week later, finally coming clean by going public on 27th June, almost 12 weeks after they were first advised of a possible compromise that apparently they didn't resolve until 23rd June, per their own site. Note that Mastercard sent out a general advisory about the account data compromise to all banks on 21st June, which may have forced TicketMaster's hand on the timing of the public disclosure.
Given TicketMaster dropped the ball on security matters, I'm also left wondering if they dropped the ball on GDPR requirements too. The time period spans the introduction of the GDPR on May 29th so, in theory, TicketMaster should have notified the relevant authorities within three days of confirming they had been breached, or by June 1st, whichever came first. If they failed to do that, or were perhaps even hoping to cover the breach up, then TicketMaster's troubles might only just be getting started.
UNIX? They're not even circumcised! Savages!
this is what they get for not having the priest of the third temple terry davis protecting them and coding for them
he could dispel the people who glow in the dark just with a flick of his wrist but now he is homeless and has to suck nignog dick to survive
what a fate
download and install templeOS, god says so