Ticketmaster UK have been fined £1.25 million by the Information Commissioners Office after a data breach which affected the Ticketmaster website in 2018. The cyber attack meant that the details of up to nine million customers could have been accessed and stolen.
Following the security breach, over 60,000 Barclays customers were victims of fraud. Online bank Monzo had to re-issue more than 6,000 cards after reports of suspicious activity.
The report released by the ICO says that despite warnings from multiple banking groups, ticketmaster took more than 9 weeks to start monitoring the activity on its payments pages. Monzo, Barclaycard, American Express and the Commonwealth Bank of Australia had all reportedly warned Ticketmaster of suspicious activity.
Deputy Commissioner at the ICO, James Dipple-Johnstone, said “Ticketmaster should have done more to reduce the risk of a cyber-attack. Its failure to do so meant that millions of people in the UK and Europe were exposed to potential fraud.”
Ticketmaster have said that they will appeal the decision given. In a statement released by the company, they said “Ticketmaster takes fans’ data privacy and trust very seriously. Since Inbenta Technologies was breached in 2018, we have offered our full cooperation to the ICO. We plan to appeal today’s announcement.”