Ticketek Data Breach: What Happened in May 2024?

In late May 2024, Ticketek—Australia's prominent event ticketing company—suffered a significant data breach that exposed the personal information tied to nearly 30 million records. This breach was linked to a third-party cloud platform, identified as Snowflake, and led to sensitive information such as names, birth dates, email addresses, gender data, and hashed passwords being compromised. Shortly after, the breached data was seen for sale on popular hacking forums. With approximately 17.6 million unique email addresses involved and more than 29 million total rows affected, the scope of this incident ranked among the most substantial Australian data breaches of the year.

How Did the Ticketek Breach Occur?

The compromise originated from a third-party cloud service, with multiple incidents connected to the Snowflake storage platform during that period. Attackers were able to access and extract user data, likely exploiting weaknesses in third-party integrations or credentials. Once inside, the attackers collected large volumes of information before advertising the data for sale to cybercriminal communities.

What Data Was Exposed?

The breach involved several types of personally identifiable information. Leaked details included:

Name titles and full names (first, middle, last)
Company affiliations
Full dates of birth
Email addresses (nearly 17.6 million unique)
Gender information
Hashed passwords

This range of compromised fields means many regular Ticketek customers may have had extensive personal information put at risk. Even though passwords were hashed, the exposure still represents a significant privacy concern for those affected.

How Many Users Were Impacted?

The incident impacted a total of 29,532,982 rows of data, with roughly 17.6 million of those rows holding unique email addresses. This makes the breach one of the largest affecting the entertainment and events sector in Australia, highlighting the reach Ticketek has across the country and beyond.

Timeline of the Incident

The breach is believed to have occurred around the end of May 2024. Shortly after the exposure was detected, compromised data began circulating on dark web and cybercrime forums. The incident quickly drew attention because of its links to a broader pattern of attacks on the Snowflake cloud platform, impacting several organizations in a similar timeframe.

Frequently Asked Questions

What happened in the Ticketek data breach?

In May 2024, Ticketek suffered a data breach due to unauthorized access to its data stored on the Snowflake cloud platform. Attackers accessed and extracted millions of customer records, affecting names, emails, birthdates, and more.

How many users were affected by the Ticketek breach in 2024?

Almost 30 million records were compromised, with about 17.6 million unique email addresses included. This represents one of the largest data breaches in Australia's entertainment sector.

What personal information was compromised in the Ticketek breach?

Exposed data included first, middle, last names, company names, dates of birth, email addresses, gender, and hashed passwords.

Was the Ticketek breach related to the Snowflake cloud platform?

Yes, the Ticketek breach was connected to a series of incidents impacting the Snowflake third-party cloud storage service in May 2024.

How can I check if I'm in the Ticketek breach?

You can check if your information was part of the Ticketek breach by utilizing the DeHashed search engine.