Dutch ticketing platform Ticketcounter has confirmed it has suffered a data breach affecting almost two million customers.
The company’s chief executive, Sjoerd Bakker, told TheTicketingBusiness that they “immediately took action” to find the leak.
He said they discovered that due to human error, a file containing a database of personal details of its 1.9 million customers was placed on a location with ‘public access enabled.’
The data exposed included full names, email addresses, phone numbers, IP addresses, and hashed passwords.
Bakker said: “The file was deleted and we’re implementing measures to prevent these kinds of human errors in the future.”
Ticketcounter is an e-ticketing platform that allows clients, such as zoos, parks, museums, and events, to provide online tickets to their venues.
According to a report from Bleeping Computer, a hacker attempted to sell the database and extort Ticketcounter for seven bitcoins, or approximately $337,000, not to leak the data.
Ticketcounter immediately contacted its clients and advised them to distribute data breach notifications to those affected.