Back to Radar
TI

Ticketcounter

High

Ticketcounter's breached database exposed sensitive customer data, later exploited for extortion.

Records exposed
1,921,722 records
Breach date
Breach Feb 22, 2021
Last update
Updated Jun 21, 2023
Source

What data was exposed?

Fields reported as compromised in this breach record.

Bank account numbersDates of birthEmail addressesGendersIP addressesNamesPayment historiesPhone numbersPhysical addresses

Why does this breach matter?

In-depth analysis of the breach and its implications.

In August 2020, a database backup of the Dutch ticketing service Ticketcounter was mistakenly made publicly accessible. This database was subsequently discovered in February 2021, downloaded, and offered for sale on a hacking forum. Compromised data included 1.9 million unique email addresses, along with additional sensitive information such as names, physical and IP addresses, genders, dates of birth, payment histories, and bank account numbers. Furthermore, the responsible parties attempted to extort Ticketcounter with threats of public release of this data.

Impact Analysis

Understanding the scope and consequences of this breach.

User Impact
Affected users face risks of identity theft, fraud, and privacy violations.
Business Impact
Negative impacts include reputational damage, legal liabilities, and operational disruption.
Affected Sectors
  • Event Ticketing
  • Consumer Services
Geographic Impact
  • Primarily Netherlands

What You Should Do

Recommended actions to take in response to this breach.

If You Were Affected

  • •Change passwords associated with the affected email address.
  • •Monitor financial accounts for suspicious transactions.
  • •Contact your bank for advice regarding compromised payment information.
  • •Be vigilant against targeted phishing emails.

Preventive Measures

  • •Implement robust access controls to prevent unauthorized database exposures.
  • •Regularly audit and secure backup files.
  • •Adopt database encryption solutions for sensitive data.

Frequently Asked Questions

Common questions about this breach and what it means for you.

The information exposed included email addresses, names, physical and IP addresses, genders, dates of birth, payment histories, and bank account numbers.

Attribution

Additional attribution provided with the breach record.

redredred@riseup.net