Live Nation disclosed on Oct. 1 that it was targeted by a cybersecurity breach affecting a small number of individuals, including at least two customers in Vermont whose exposure included Social Security numbers, government IDs and health records. The concert giant confirmed the incident to Billboard on Oct. 7, saying its investigation found no impact on company operations.
The disclosure has already drawn legal action. Three class action lawsuits have been filed against Live Nation alleging the company failed to maintain adequate cybersecurity measures to protect sensitive customer data, according to Billboard.
What Live Nation Disclosed
The breach came to light through a notification posted to the Vermont Attorney General’s online portal, which listed two Vermont customers among those affected, Billboard reported. The exposed data included Social Security numbers, government identification and health records, though Live Nation has not said how many people in total were affected or when the breach itself took place.
In a statement to Billboard, Live Nation said, “Recently, we identified, contained and secured a cybersecurity incident.” The company added that a review by an outside cybersecurity firm determined the breach was contained. “Following a thorough internal review and independent investigation by a leading cybersecurity firm, we found the incident was limited in scope and had no impact on our operations. The small number of individuals whose information may have been affected are being notified and offered support in monitoring their information,” the company said.
Who May Be Affected
Live Nation has described the breach as limited in scope and said affected individuals are being notified directly and offered identity monitoring support. The company has not specified whether those impacted are customers, employees or both, and the exact number affected beyond the two Vermont residents named in the state filing has not been disclosed.
A Pattern Of Past Breaches
This is not the first time Live Nation or its Ticketmaster subsidiary has disclosed a major data exposure. In 2018, a breach compromised payment information from British ticket buyers and led to a £1.25 million fine, about $1.65 million, from the U.K. Information Commissioner’s Office.
A second breach in 2024 hit Ticketmaster customers as part of a larger attack on Snowflake, a third-party cloud storage provider used by numerous companies. That hack was claimed by the group ShinyHunters, according to Billboard.
The latest incident adds a third data security episode to Live Nation’s record in under a decade, a pattern now cited directly in the class action complaints filed against the company.
What’s Next
The three class action lawsuits remain pending. Live Nation has not disclosed how the breach occurred or when it took place.
Don't stop here
Every Score. Every Story. One Home.
Breaking sports, entertainment and news from across the Total Apex network, updated all day.
Get the Full Story →
