Live Music

Hackers publish alleged Taylor Swift ticket data

Featured Image: Paolo V, CC BY 2.0, Edited for size

Hackers have claimed they have secured barcode data for hundreds of thousands of tickets for Taylor Swift’s Eras Tour, and are demanding that ticketing giant Ticketmaster cough up millions in ransom money. 

According to reports, the hacking group posted samples of the data to an online forum for Swift’s US shows in Indianapolis, Miami and New Orleans. The group also alleged it had an additional 30 million barcodes for other high-profile concerts and sporting events.

The Miami, New Orleans and Indianapolis shows are all scheduled to take place between October 18 and November 3.

The ransom posts on the online forum were reportedly from the hacking group ShinyHunters, and another account that appeared to be associated with it, called Sp1d3rHunters.

ShinyHunters is the same group of hackers that offered the details of 560 million Ticketmaster customers for half a million dollars, earlier this year.

The group had reportedly breached a third party contract to gain access to Ticketmaster’s data which included names, partial payment details, phone numbers and further information.

Live Nation later confirmed the data breach in a US Securities and Exchange Commission (SEC) filing.

It is believed that the latest sample data posted to the forum has come from this same large-scale breach.

Following the latest claims made by the hacking group, a statement from parent company Live Nation Entertainment said that Ticketmaster had not engaged over ransom, as per the Guardian. Ticketmaster added that its ticketing technology prevented leaked barcodes from being used as tickets, as the barcodes refresh every few seconds, meaning it will not affect Swift fans from being able to enter the concerts.

Ticketmaster is not the only high-profile ticketing company to be targeted. Last month, Ticketek Australia also reported that some customers’ personal information, such as names, dates of birth and email addresses may have been exposed during a cybersecurity breach.