Ticketfly Says 27 Million Accounts Compromised During 'Malicious' Attack

Not accessed during the hack: passwords and credit card info.

Event ticketing platform Ticketfly said on its website that roughly 27 million user accounts were compromised during last week's cyber attack. With the help of third-party security experts, the company determined that information including names, addresses, email addresses and phone numbers were accessed, but that credit/debit card info and passwords were not.

"Upon first learning about this incident we took swift action to secure the data of our clients and fans," according to the Eventbrite-owned company's support page. "We take privacy and security very seriously and regret any disruption this has caused."

Ticketfly's website is fully back online a week after being targeted by what it describes as a "malicious cyber attack," though its mobile app for iOS remains offline "as we continue to prioritize bringing up the most critical parts of the platform first." Following the hack, the company rolled out a network of temporary venue and promoter websites so that events, including Riot Fest and Celebrate Brooklyn, could continue selling tickets. The "vast majority" of the temporary sites are now live, the firm said.

All passwords for both ticket buyers and venue/promoter clients were reset following the hack, though they found no evidence that they were accessed. "It is possible, however, that hashed values of password credentials could have been accessed," the site warned. "Hashing is a way of scrambling a piece of data, making it generally incomprehensible."

Ticketfly's "backstage" database -- the collection of personal contact information and confidential planning details for many of the venues, festivals and promoters who use Ticketfly for their events -- was targeted by a hacker on May 31. A hacker named "IsHaKdZ" claimed responsibility and reportedly demanded payment of one bitcoin to point out its vulnerable system.

Once competitors, Eventbrite purchased Ticketfly from Pandora for $200 million in a sale that closed in early September 2017. At the time, the combined company projected they will do $4 billion in global ticket sales annually, selling 2 to 3 million tickets per week to consumers in 180 countries.