Security News > 2021 > March > European e-ticketing platform Ticketcounter extorted in data breach

European e-ticketing platform Ticketcounter extorted in data breach
2021-03-01 22:35

A Dutch e-Ticketing platform has suffered a data breach after a user database containing 1.9 million unique email addresses was stolen from an unsecured staging server.

Ticketcounter has confirmed the data breach to both BleepingComputer and Troy Hunt of Have I Been Pwned, who spoke to the company's owner after receiving the database.

In what should be a model of transparency, Ticketcounter CEO Sjoerd Bakker has told BleepingComputer that they copied a database to a Microsoft Azure server to test an 'anonymization process' that replaces personal data with fake data.

Bakker told BleepingComputer that Ticketcounter is creating various resources for his clients to facilitate these data breach notifications.

The stolen database has been provided to Have I Been Pwned's Troy Hunt by the threat actor and added to the data breach lookup service.

As those affected are not customers of Ticketcounter directly, most users will have to wait until the particular venue discloses the data breach.


News URL

https://www.bleepingcomputer.com/news/security/european-e-ticketing-platform-ticketcounter-extorted-in-data-breach/