Ticketmaster customer data stolen from its Snowflake account
Live Nation said in a May 31, 2024 8-K that on May 20 it found unauthorized activity in a third-party cloud database holding mostly Ticketmaster data, after a criminal offered the data for sale on May 27. Ticketmaster later confirmed the provider was Snowflake and began notifying customers that names, contact details and encrypted card data may have been taken. It was one of the victims in the wider Snowflake campaign.
- Victim
- Live Nation Entertainment (Ticketmaster)
- Industry
- Media and streaming
- Country
- United States
- Intrusion began
- Apr 2024
- First disclosed
- May 31, 2024
- Actor
- Financially motivated
- Initial access
- Stolen credentials
- Identity control that failed
- Authentication
- MFA
- Not enforced on the abused account
- Abused identity
- Human account
- Records affected
- Not disclosed
- Disclosed cost
- Not disclosed
The identity lesson
Same failure as the wider Snowflake campaign: a reachable data platform account with no MFA and long-lived credentials.
Go deeper on SWI
Sources
- Live Nation Entertainment Form 8-K (Item 8.01), US SEC, May 31, 2024
- Ticketmaster confirms data breach and personal info lost, says Snowflake systems were hacked, TechRadar, Jun 28, 2024
Record verified Oct 31, 2026 against the sources above. Corrections: contact us.
Related incidents
- Nikkei Slack workspace accessed with credentials stolen by malware 2025 · Stolen credentials
- Disney Slack data theft using credentials stolen from an employee's personal computer 2024 · Stolen credentials
- AT&T call and text records stolen from its Snowflake workspace 2024 · Stolen credentials
- Neiman Marcus customer data stolen from its Snowflake account 2024 · Stolen credentials
Cite this record
SWI Community Team. (2026). Ticketmaster customer data stolen from its Snowflake account. Identity Breach Database, Start with Identity. https://startwithidentity.com/breaches/incidents/2024-ticketmaster-snowflake-account/
Part of the Identity Breach Database, free to reuse under CC BY 4.0. Analysis across every record: Identity Breach Report 2026.