TicketToCash’s Epic Fail: 520,000 Customers’ Data Left Out in the Open
TicketToCash, known for reselling event tickets, left 520,000 customers’ data exposed due to a misconfigured database. Cybersecurity expert Jeremiah Fowler discovered this 200GB digital oopsie, which included PII and partial financial details. Initially ignored, Fowler’s second alert finally secured it. Let’s hope their next act isn’t a data breach sequel!
Hot Take:
Looks like TicketToCash made a big oopsie by leaving their database as open as a concert venue’s doors before the show starts. If you’ve ever sold a ticket on this platform, your data might have been as exposed as a streaker at a football game. Note to TicketToCash: maybe consider hiring some digital bouncers next time.
Key Points:
– A 200GB database with over 520,000 records was left unprotected, exposing personal and financial data.
– Data included partial credit card numbers, physical addresses, and concert ticket details.
– TicketToCash initially didn’t respond to the data exposure notification.
– The database remained exposed for four days after initial notification before it was secured.
– The exposed data could lead to phishing, identity theft, and fake ticket scams.