Ticketcounter Data Breach

What happened?

In August 2020, the Dutch ticketing service Ticketcounter inadvertently published a database backup to a publicly accessible location where it was then found and downloaded in February 2021 . The data contained 1.9M unique email addresses which were offered for sale on a hacking forum and in some cases included names, physical and IP addresses, genders, dates of birth, payment histories and bank account numbers. Ticketcounter was later held to ransom with the threat of the breached being released publicly.

When did it happen?

The breach date in the public record is February 22, 2021. The record was added to the catalogue on March 1, 2021 and last updated there on June 21, 2023.

What information was reported as exposed?

• Bank account numbers
• Dates of birth
• Email addresses
• Genders
• IP addresses
• Names
• Payment histories
• Phone numbers
• Physical addresses

These are incident-level categories. The record does not prove that every category was exposed for every affected person.

Who may be affected?

This record may be relevant to people who had an account or other relationship with Ticketcounter or used ticketcounter.nl around February 22, 2021. A catalogue entry does not establish that every customer was affected or that every listed data category applied to each person. Compare the record with an official notice addressed to you.

What should you do?

Choose actions that match the information involved. If you find signs that someone is using your identity, the Federal Trade Commission provides a personal recovery plan at IdentityTheft.gov.