Skip to content

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

Listed on a ransomware leak site

Ticketmaster

ticketmaster.com

Ticketmaster was listed on the ShinyHunters and Arkana leak site on Jun 6, 2025. Brandefense has recorded 2 separate claims against it. Information as of Oct 19, 2026.

Updated continuously · figures as of Oct 19, 2026
Claimed by
ShinyHunters, Arkana
First listed
Jun 6, 2025
Claims recorded
2

2 Leak-Site Claims.

ShinyHuntersConfirmed claim
Posted on the leak site
Oct 14, 2026
Collected by Brandefense
Oct 18, 2026
Data claimed
Not stated
Leak-site post text, written by the group
Threat actors identifying as ShinyHunters (also known as Sp1d3rHunters, Sp1d3rHunters) claim to have compromised Ticketmaster and stolen 637M+ user records including personal information (names, emails, phone numbers) and 57M+ event barcodes for major artists (Taylor Swift, BTS, BLACKPINK, etc.). Actors are demanding $1.5M USD ransom from Ticketmaster or threaten to leak all stolen data. They are also offering the stolen data for sale at $200k USD per transaction in cryptocurrency (XMR/BTC). Contact details provided: [removed], Session IDs, and multiple Telegram channels.
ArkanaConfirmed claim
Posted on the leak site
Jun 6, 2025
Collected by Brandefense
Jul 11, 2025
Data claimed
Not stated
Leak-site post text, written by the group
Ticketmaster Entertainment, Inc. is an American ticket sales and distribution company headquartered in Beverly Hills, California. It operates in more than 20 countries, delivering over 100 million tickets annually. They provide services for worldwide events including concerts, sports events, theatre performances, and family shows. Apart from ticket distribution, Ticketmaster offers marketing and support for event organizers.

Get alerted the moment your company or a supplier is posted on a leak site.

Alert me
Other confirmed victims claimed by the same group
VictimClaimed byCountryIndustryData claimedPosted
Vercel Inc.
vercel.com
ShinyHuntersUSUnited StatesHosting Service ProvidersNot stated
Abaco Informatica
abaco-informatica.com.ar
ShinyHuntersARArgentinaTechnologyNot stated
Correios
correos.es
ShinyHuntersESSpainTransportation and LogisticsNot stated
Somali Immigration and Nationality Agency (HSJ); Ministry of Justice and Constitutional Affairs
etas.gov.so
ShinyHuntersSOSomaliaRetailNot stated
DexCom, Inc.
dexcom.com
ShinyHuntersUSUnited StatesHealthcareNot stated
O'Reilly Automotive
oreillyauto.com
ShinyHuntersUSUnited StatesRetailNot stated
Other confirmed victims in the same industry
VictimClaimed byCountryIndustryData claimedPosted
Grupo Cronica
grupocronica.com.ar
QilinARArgentinaRetailNot stated
Belcorp
belcorp.biz
QilinPEPeruRetailNot stated
Quikrete
quikrete.com
HelixUSUnited StatesRetailNot stated
Pure Options
pureoptions.com
PlayUSUnited StatesRetailNot stated
Verano Holdings
verano.com
The-seven-deadly-sinsUSUnited StatesRetail2.4 MB
Segres Systec
segres.com
QilinPEPeruRetailNot stated

Get Real-Time Alerts, IOC Feeds And Takedowns.

The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.