Arkana’s Awkward Encore: Selling Old Ticketmaster Breach as New Hit!
The Arkana Security extortion gang tried to sell what they claimed was new Ticketmaster data, only for it to be recycled goods from the 2024 Snowflake data theft attacks. Apparently, data reselling is the new “vintage” trend in cybercrime!

Hot Take:
Well, folks, it seems like the Arkana Security extortion gang is trying to pull the old “re-gift your Christmas present” trick on us. But instead of a fruitcake, it’s a 569 GB package of déjà vu, featuring the same Ticketmaster data from the 2024 Snowflake data heist! Looks like they tried to pass off last year’s leftovers as a fresh hack. Classic!
Key Points:
- Arkana Security listed Ticketmaster data but it’s from a previous 2024 Snowflake data theft.
- RapeFlake tool was used by threat actors for data exfiltration during the Snowflake attacks.
- ShinyHunters, an extortion group, was behind the original Snowflake attacks.
- Arkana’s listing was removed, and it’s unclear if they’re linked to ShinyHunters.
- ShinyHunters have a history of high-profile breaches, including PowerSchool and Salesforce.
Already a member? Log in here