In a statement issued on Friday night, Ticketek parent company TEG announced they had been made aware of the breach by their third-party cloud-based platform supplier.
“Ticketek has become aware of a cyber incident impacting Ticketek Australia account holder information, which is stored in a cloud-based platform, hosted by a reputable, global third party supplier,” the statement began. (read in full below)
They said an internal investigation after being made aware of the breach appears to show that no accounts have been compromised, however, personal details have been affected.
“The available evidence at this time indicates that, from a privacy perspective, customer names, dates of birth and email addresses may have been impacted,” they said.
TEG are warning Ticketek customers to be vigilant against scams and phishing emails over the coming weeks, as they continue to investigate the incident.
“We apologise for any concern that this news may cause – we will provide further updates as more information becomes available,” the statement said.
It’s not known if the incident is linked to the global Ticketmaster breach, which was announced by parent company, Live Nation, earlier this week.
TICKETEK STATEMENT IN FULL:
“Ticketek has become aware of a cyber incident impacting Ticketek Australia account holder information, which is stored in a cloud-based platform, hosted by a reputable, global third party supplier.
“Ticketek has secure encryption methods in place for all passwords and no Ticketek customer account has been compromised. Additionally, Ticketek utilises secure encryption methods for online payments and uses a separate system to process online payments, which has not been impacted. Ticketek does not hold identity documents for its customers.
“Since our third party supplier brought this to our attention, over the past few days we have worked diligently to put every resource into completing an investigation so that we can communicate with customers who may have been impacted, and other stakeholders, as quickly as possible.
“The available evidence at this time indicates that, from a privacy perspective, customer names, dates of birth and email addresses may have been impacted.
“Our priority at this initial stage is to best protect our customers, people and all others who have entrusted us with their information. As such, we have already commenced notifying those customers who may have been impacted. We apologise for any concern that this news may cause – we will provide further updates as more information becomes available.
“We have also notified the Australian Cyber Security Centre (ACSC) and we are liaising with the Office of the Australian Information Commissioner (OAIC) and the National Office of Cyber Security in relation to the incident.
“On a precautionary basis, we recommend that our customers remain vigilant for potential phishing emails and other scam communications, including from organisations purporting to be from Ticketek. We recommend that you review the cyber security guidance provided below.
“We thank our customers for their understanding and support as we work through this.
“We have a dedicated service team available to answer any questions on our 24-hour incident hotline 1800 907 587 (Australia) or +61 2 7254 8027 (International) or email us via cybersafe@ticketek.com.au.”
