The company have admitted this breach will have affected tens of thousands of its UK customers. All affected customers have been contacted.
It is believed that some personal or payment information may have been accessed by an unknown third party.
Ticketmaster claim to have first detected the breach on June 23 and advised their customers to change their passwords.
According to Wired, mobile bank Monzo detected the breach several months ago. Monzo claim the breach started in April when 70 per cent of its customers who reported fraud also made a purchase through Ticketmaster the same day. After alerting Ticketmaster, Monzo were told there was no evidence of a breach at this time.
In response to the reported issues, Monzo issued several thousand new cards to its users who could have been affected, but did not reveal the identity of the merchant that had caused the issue.
As it turns out, it wasn’t Ticketmaster that was breached, but one of its subcontractors, Inbenta Technologies, who operate the chatbot on Ticketmaster’s site. In a statement the CEO of Ibenta clarifies the source of the breach was “a single piece of JavaScript code, that was customized by Ibenta to meet Ticketmaster’s particular requirements. This code is not part of any of Ibenta’s products or present in any of our other implementations”.
Following the disclosure of the breach Ticketmaster is confident it has complied with the General Data Protection Regulation rules, informing all relevant authorities as soon as possible.
The UK’s National Cyber Security Centre said it was monitoring the situation.
Send us your CV and have our recruiters match you to the ideal opportunities
Do you already have an account with us?
Log inWant to have an account with us?
RegisterWant to just send us your CV?
By submitting your registration and CV to us you are agreeing to join our database and to be contacted about relevant jobs industry communications. Please read our terms of business for more information.