The Breach
In 2024, attackers accessed a Ticketmaster database hosted on the third-party cloud platform Snowflake and exfiltrated a large volume of customer data. The hacking group ShinyHunters later advertised the trove for sale on the dark web, claiming it held information on as many as 560 million customers — names, contact details and, in some cases, partial payment information. The intrusion was part of a broader campaign that hit many companies using Snowflake, reportedly enabled by stolen login credentials rather than a flaw in Snowflake itself.
The exact number of affected people is disputed — 560 million is the figure the attackers claimed — but the breach was clearly among the largest of the year.
The Litigation
Affected customers filed class-action lawsuits alleging Ticketmaster and its parent were negligent in securing the data and slow to disclose the breach. Plaintiffs point to the gap between when the intrusion occurred and when customers were notified, arguing the delay left them exposed. The cases were headed toward consolidation before a single federal court for coordinated handling. Separately, in the criminal track, a hacker tied to the Snowflake-linked campaign pleaded guilty.
At the time of writing there was no consumer settlement; the civil litigation was still in early stages.
What Customers Should Know
If you have a Ticketmaster account, change your password (and any place you reused it), enable two-factor authentication, and watch for phishing that references concerts or ticket orders. Because payment data may have been involved for some customers, monitor card statements and consider a credit freeze. Any settlement, if one is reached, will be administered through an official channel — not a site asking for a fee.
Before You Act
Thinking About Filing a Claim?
Most plaintiff lawyers offer a free initial consultation and work on contingency, meaning no fee unless there is a recovery. LawsuitWatch is not a law firm: we publish explainers, and we do not provide legal advice, representation or referrals. Your state bar directory is the reliable place to find and verify a lawyer.
Ticketmaster Data Breach Lawsuit: The Snowflake Hack: Frequently Asked Questions
Answers to the most common questions about this case and your legal options.
What happened in the Ticketmaster data breach?
In 2024 attackers accessed a Ticketmaster database on the Snowflake cloud platform and stole a large trove of customer data, which the group ShinyHunters offered for sale, claiming up to 560 million records.
Is there a Ticketmaster breach settlement?
Not yet. Customers filed class actions alleging negligence and delayed disclosure, and the cases were headed toward consolidation in federal court. The litigation was still in early stages at the time of writing.
What should Ticketmaster customers do?
Change your password and any reused passwords, enable two-factor authentication, watch for phishing, and monitor card statements since payment data may have been involved for some customers.
Legal Disclaimer
This article is general legal information, not legal advice, and does not create an attorney-client relationship. Case status, eligibility criteria, and any amounts described are as reported at the date shown and may change. Consult a licensed attorney in your jurisdiction about your own situation.