Hacker claims to have 30 million customer records from Australian ticket seller giant TEG

A hacker is advertising customer data allegedly stolen from the Australia-based live events and ticketing company TEG on a well-known hacking forum.

On Thursday, a hacker put up for sale the alleged stolen data from TEG, claiming to have information of 30 million users, including the full name, gender, date of birth, username, hashed passwords, and email addresses. 

In late May, TEG-owned ticketing company Ticketek disclosed a data breach affecting Australian customers’ data, “which is stored in a cloud-based platform, hosted by a reputable, global third party supplier.” 

The company said that “no Ticketek customer account has been compromised,” thanks to the encryption methods used to store their passwords. TEG conceded, however, that “customer names, dates of birth and email addresses may have been impacted” — data that would line up with that advertised on the hacking forum. 

The hacker included a sample of the alleged stolen data in their post. TechCrunch confirmed that at least some of the data published on the forum appears legitimate by attempting to sign up for new accounts using the published email addresses. In a number of cases, Ticketek’s website gave an error, suggesting the email addresses are already in use.  

Leave a Comment