Live Nation recently disclosed a data breach that exposed sensitive customer information, according to details unearthed by DMN. Already, multiple class action lawsuits have emerged, with potentially more on the way.
The disclosure was easy to miss. On October 1st, Live Nation quietly disclosed to the Vermont Attorney General a data breach that exposed highly sensitive customer information, including social security numbers and government ID numbers. Though Live Nation claimed that only “a small number of individuals” were impacted, no sooner had that information been released than numerous class action lawsuits cropped up.
DMN has so far discovered three different class actions filed against Live Nation over the breach, with all alleging the company’s negligence in protecting the personal information of potentially thousands of customers exposed. One of the lawsuits claimed that Live Nation breached its duties under common law, contract law, industry standards, and the Federal Trade Commission Act to implement “reasonable and adequate” data security measures.
“Recently, we identified, contained, and secured a cybersecurity incident,” Live Nation said in a statement about the breach. “Following a thorough internal review and independent investigation by a leading cybersecurity firm, we found the incident was limited in scope and had no impact on our operations. The small number of individuals whose information may have been affected are being notified and offered support to monitor their information.”
Those who may have been affected should watch their email for a notification letter from Live Nation. Such letters typically disclose information such as details about the breach, any steps the company is taking, and any resources that may be available to help those affected.
Notably, on September 4, 2025, a “threat actor” under the name ByteToBreach posted online claiming to be selling stolen data from Live Nation and its subsidiary Ticketmaster. This actor claimed to possess the names, email addresses, physical addresses, phone numbers, IP addresses, and browser fingerprints of those affected. However, the connection between the two incidents remains uncertain.
Live Nation has faced two prior data breaches in 2018 and 2024, both specifically targeting Ticketmaster customers. The first incident compromised payment information from ticket buyers in the UK, and the country’s Information Commissioner’s Office fined the company for £1.25 million. The second was part of a larger breach that affected Ticketmaster’s third-party storage service, and the hacking group ShinyHunters claimed to be the party behind it.
Lawsuits brought against the company in the U.S. over both of those incidents remain ongoing.
