In October 2022, Ticketmaster disclosed that they had been the victim of a cyberattack which resulted in customer data being accessed by an unauthorized third party. While the details are still emerging, it appears that the hackers were able to gain access to some customers’ names, email addresses, phone numbers, and mailing addresses. Perhaps most concerning, there are reports that the hackers may have also accessed some customers’ Ticketmaster account login credentials.
For Ticketmaster users, the possibility that hackers may have account passwords is especially worrisome. With login credentials in hand, hackers would potentially be able to access Ticketmaster accounts, view order history and details, and even initiate transfers of tickets to other accounts or locations for resale.
In light of this breach, if you are a Ticketmaster user, it is imperative that you take steps to protect your account and tickets. Here are some key actions to take:
Reset your Ticketmaster password
If there is any chance the hackers have your current Ticketmaster login credentials, you’ll want to reset your password immediately. This will invalidate the compromised password and prevent the hackers from accessing your account with it.
To reset your password, go to Ticketmaster’s website and click on your account name in the top right corner. In the drop down menu, select “Account Settings”. On the Account Settings page, click “Change Password” and follow the prompts to create a new password.
Be sure to choose a strong, unique password that you don’t use on any other sites. Using a password manager can help you generate and track secure passwords.
Enable two-factor authentication
Two-factor authentication (2FA) adds an extra layer of security beyond just a password. With 2FA enabled, accessing your account requires both your password and a randomly generated one-time code or confirmation delivered through another method like an authenticator app or SMS text message.
To set up 2FA on your Ticketmaster account, go to Account Settings and click “Add Extra Security” under the Login Activity section. Follow the instructions to enable two-factor and configure your preferred second verification method.
With 2FA enabled, even if hackers have your password they still can’t access your account without also having your phone or authenticator app. This greatly improves your account security.
Carefully monitor your upcoming tickets
Keep a close eye on any upcoming tickets you have purchased through Ticketmaster. Specifically, look for any signs of unauthorized transfers or changes:
- Log into your Ticketmaster account periodically and check your Upcoming Events for any tickets that have changed delivery method (mobile entry vs. print) or shipping address without your authorization.
- Watch for any emails from Ticketmaster confirming ticket transfers or shipping address changes that you didn’t initiate. Contact their support immediately if you receive any suspicious emails.
- Check the Ticketmaster app and make sure all your tickets are still showing under the Tickets section as expected.
If you spot any unauthorized changes, notify Ticketmaster support right away so they can investigate and potentially reverse fraudulent transfers or changes.
Transfer high-demand tickets to a safe account
If you have hard-to-get, high-demand tickets in your Ticketmaster account, you may want to consider proactively transferring them to another safe account as an extra precaution. This could prevent fraudsters from transferring them first if they do have your credentials.
You can transfer tickets to another trusted Ticketmaster account that you or a family member or friend controls. Just make sure the recipient account also has two-factor authentication enabled for maximum security.
To transfer tickets, log into your account, go to your Upcoming Events, click the event you want to transfer from, then select the Transfer button. Follow the prompts to complete the transfer to the recipient account.
If you don’t have another Ticketmaster account available, you may want to create a new one specifically to transfer your high-demand tickets to temporarily until the breach investigation progresses further.
Watch for any suspicious charges
In addition to names, emails, phone numbers, and addresses, credit card information was possibly accessed in the Ticketmaster breach for some customers. So it’s wise to closely monitor charges on any payment cards you have saved in your Ticketmaster account.
Watch for small, unauthorized charges which could indicate your card was stolen in the breach and fraudsters are testing it. Report any questionable charges to your card issuer right away.
You may want to proactively contact your bank and request they issue you a new card number to replace any compromised cards you had on file with Ticketmaster. This will prevent any future fraudulent use.
Beware of breach-related phishing scams
High-profile breaches like this Ticketmaster incident often spur follow-on phishing attacks. Scammers send emails or call claiming to be from Ticketmaster’s security team asking you to verify account information or reset passwords. But it’s just a scam aimed at stealing credentials or credit card details.
If you get any unsolicited calls or emails purporting to be from Ticketmaster asking for personal information, do not respond. Instead, call Ticketmaster customer service directly to verify if the communication was legitimate.
In general, maintain diligence against breach-related phishing over the coming weeks. Ticketmaster will likely notify affected users directly through their website or via email.
Consider using a password manager
Reusing the same password across multiple accounts is an insecure practice that needlessly puts all of your accounts at risk if that password is compromised. But having unique, complex passwords for every account you have is impractical for most people to manage.
That’s where dedicated password managers like LastPass, 1Password, and Dashlane come in. These tools store all your unique passwords securely encrypted in one place and allow you to easily log into sites without having to remember each password.
Using a password manager lets you have strong, random unique passwords for every account without any of the hassle of trying to remember them all. This greatly improves your overall security and prevents account breaches from impacting your other accounts.
Monitor your credit reports
Given the breach involved personal information like names, addresses, and potentially some credit card data, it’s a good idea to keep an eye on your credit reports in the coming months. Unusual activity could indicate fraud or identity theft.
You can obtain free credit reports from Equifax, Experian, and TransUnion once per year at annualcreditreport.com. Checking reports from all three is ideal since you don’t know ahead of time which bureau a lender may use.
Watch for any accounts or inquiries you don’t recognize. Also monitor your credit scores for any unexpected drops which could reflect potential fraudulent activity.
If you spot fraudulent activity on your credit reports, contact the involved creditors immediately as well as your local police department to file an identity theft report.
Sign up for fraud alerts
Consider placing fraud alerts on your credit files as an extra precaution in the aftermath of this breach. A fraud alert requires lenders to take additional verification steps before opening new credit in your name.
You can place an initial 90-day fraud alert for free by contacting any one of the three credit bureaus. An extended seven year fraud alert is available with an identity theft report filed with the FTC.
The alerts may help deter criminal use of any personal data stolen in the breach. Just be aware fraud alerts may also cause some inconvenience when you legitimately apply for new credit yourself.
Freeze your credit reports
If you are very concerned about the risk of identity theft due to the Ticketmaster breach, you may want to consider more drastic measures like freezing your credit reports with Equifax, Experian and TransUnion.
A credit freeze restricts access to your credit report, which effectively prevents anyone from opening new accounts in your name. That includes you, so it’s quite restrictive. You’d have to temporarily lift the freeze whenever you wanted to apply for credit yourself.
Freezes may be advisable though if you think the Ticketmaster breach has put you at high risk. Just understand it will introduce inconvenience whenever you or others need access to your reports for legitimate purposes.
Beware offers related to the breach
Watch out for unsolicited calls and emails offering assistance with the Ticketmaster breach. There will likely be companies offering credit monitoring, identity theft protection, or other services related to the breach.
While some services may have value, exercise caution. Verify companies first before sharing personal information or signing up for any services.
Also know that Ticketmaster is likely to make some sort of credit monitoring or protection product available for free to affected customers. You may want to wait for official details from them before signing up or paying any outside companies.
Understand the risks
While the Ticketmaster breach undoubtedly represents a serious data security failure on their part, it’s important to keep the risks in perspective.
Not every customer was necessarily impacted. For those that were, hackers may not have accessed everything like credit card details for each user. And having some personal data like your name, email, and address does not necessarily mean the hackers will be able to steal your full identity.
That said, increased vigilance and monitoring in the wake of such an incident is always a smart idea. Taking proactive precautions can help minimize any potential losses from fraudulent activity stemming from your data being compromised.
If you believe you are the victim of identity theft as a result of the Ticketmaster breach, be sure to report it to the FTC and your local police department. Also contact banks, lenders, insurers, and other service providers where fraudulent accounts may have been opened in your name. With quick action, the damage can often be contained.
Avoid overreaction
While extra vigilance is prudent, avoid overreacting to the Ticketmaster breach. Things like freezing your credit reports permanently or closing all your credit card accounts are usually unnecessary and extremely inconvenient.
For most people, simple precautions like resetting your Ticketmaster password, enabling two-factor authentication, monitoring your credit reports and card statements may be sufficient. More proactive options like fraud alerts, credit freezes and password managers can provide additional protection depending on your level of concern.
Breach impacts ultimately tend to vary significantly from person to person. Some users see no fraud at all, while a small minority may experience major identity theft. Take reasonable precautions, but don’t assume the worst-case scenario will occur.
Pressure Ticketmaster for accountability
Companies like Ticketmaster have an obligation to safeguard their customers’ personal data. When they fail to protect your data, they should be held accountable.
If you are impacted by this breach, make sure to report it to Ticketmaster support and have them document your complaint. You may also want to file formal complaints with your state attorney general’s office and the Federal Trade Commission detailing your experiences.
The more light shined on data security failures like this, the more incentive it creates for companies to take their responsibilities seriously going forward.
Ticketmaster will also likely have to offer some sort of free credit monitoring or identity theft protection product for impacted customers. Be sure to take advantage of these offers if eligible.
Additionally, class action lawsuits related to the breach may emerge. Keep an eye out for any notifications related to potential class action participation you may be eligible for.
Change key account passwords
If you reused your Ticketmaster password on any other online accounts, make sure to change those passwords immediately as well. With that compromised password, hackers may attempt to access your email, bank account, or other sensitive accounts.
Be especially diligent about changing the password for your email account if it matches your Ticketmaster one, as gaining access to your email can allow hackers to more easily compromise or reset passwords for other accounts through password recovery flows.
A password manager makes changing and managing unique passwords across all your accounts quick and simple. Using a unique, random password for every account you have online is ideal from a security perspective.
Monitor your Ticketmaster account
Moving forward, keep a close watch on your Ticketmaster account activity for any signs of unauthorized access. Check back periodically and look for:
- Upcoming tickets transferred without your approval
- New events or ticket purchases you didn’t make
- Changes to your account name, email, or other profile details
- Billing information updates if you have payment methods saved
Ongoing monitoring is wise as hackers may still attempt to leverage any data they obtained for months after the initial breach occurs.
If you spot any suspicious activity on your account, change your password again immediately and contact Ticketmaster support to report it and have any unauthorized changes reversed.
Beware targeted phishing attempts
Scammers prize data from breaches like this because it allows them to conduct more convincing targeted phishing attacks. Having your real name, email address and Ticketmaster purchase history enables them to craft very legitimate looking fake Ticketmaster emails.
Be extra skeptical of any Ticketmaster-themed emails over the coming months. Do not click links or download attachments without verifying their legitimacy first, no matter how genuine they may appear at a glance.
When in doubt, navigate to Ticketmaster’s website directly and log into your account there rather than clicking links in emails. Contact Ticketmaster support if you receive any suspicious communications claiming to be from them.
Consider using a virtual credit card
To add an additional layer of protection when purchasing tickets from Ticketmaster going forward, you may want to consider using a virtual credit card service like Privacy.com or virtual card numbers from your bank.
Virtual card services let you generate temporary “burner” card numbers tied to your real accounts for use on sites like Ticketmaster. Even if Ticketmaster is breached again down the road, hackers won’t be able to leverage these one-time virtual card numbers.
This helps mitigate damage in the event of another breach. Just be aware some virtual card services charge fees, so check total costs.
Leverage the lessons
While a breach like this causes understandable frustration and anxiety, you can also use it as a learning experience to improve your overall security going forward.
If you weren’t already using a password manager, 2FA, credit freezes, or monitoring your credit reports regularly, let this serve as the impetus to start. While a hassle in the moment, these tools provide valuable protection.
Additionally, be more selective about the personal information you provide to online services in the future. Only share details like your phone number or date of birth when absolutely required for your use of the service.
The more prudent you are about sharing personal data online, the less data you’ll have exposed when the inevitable breaches do occur.
Remain vigilant over time
Don’t let your guard down after just a month or two. It’s not uncommon for fraud from breaches to occur many months, or even years down the road. Criminals sometimes warehouse stolen data and use it in bits and pieces over an extended period.
So while extremely diligent monitoring may only be necessary for a short initial period, you’ll still want to keep a reasonable level of ongoing vigilance for suspicious activity for some time. Don’t completely forget about the breach after a few months.
Consider enrolling in a credit monitoring service that provides alerts when new accounts are opened or your credit score changes. Set calendar reminders to check your credit reports periodically. And keep an eye on bills and statements.
Persistent vigilance is the key to limiting your risk exposure over the long run.
Conclusion
The reported Ticketmaster data breach presents a concerning situation for potentially millions of customers. If hackers did gain access to user account credentials and personal data, fraudulent ticket transfers and identity theft become real risks.
By taking prudent steps like resetting your Ticketmaster password, enabling two-factor authentication, monitoring your credit reports and account activity closely in the near term, you can help minimize your risks. Consider additional options like fraud alerts, credit freezes and virtual card numbers for heightened protection based on your level of concern.
While breach impacts are always frustrating for affected users, through proper vigilance, monitoring and precautions, you can emerge from the incident unscathed. Be wary of social engineering and phishing attempts related to the breach, and leverage the learnings to improve your overall security posture going forward.