Skip to content
October 13, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
  • Home
  • News
  • Cyber Security
  • Malware causes Ticketmaster UK website customer information disclosure
  • Cyber Security

Malware causes Ticketmaster UK website customer information disclosure

Do Son June 29, 2018 2 minutes read
Add Daily CyberSecurity as a preferred source on Google

The Ticketmaster UK website announced on Wednesday that they had found malicious software in the relevant products of the Ticketmaster website. Some customers’ personal information or payment information may have leaked.

Ticketmaster is a large ticket sales company, headquartered in California, USA, operating points all over the world, and its main ticketing types are entertainment and sports. According to its official announcement, June 23, Ticketmaster UK found malicious software in customer support products hosted by Ticketmaster’s external third-party provider Inbenta Technologies. After malware was discovered, they disabled all Inbenta products on the Ticketmaster website. 

However, some customers’ personal information has disclosed. Personal information that may be exposed includes name, address, email address, phone number, payment details and Ticketmaster login details. There are transactions on the Ticketmaster UK website between February and June 23, as well as personal information on international customers who purchased or attempted to purchase tickets between September 2017 and June 23, 2018, all of which are subject to disclosure of information. Websites that have Inbenta’s products running are also affected, such as Ticketmaster International, Ticketmaster UK, GETMEIN! And TicketWeb website. However, Ticketmaster stated that customers in North America are not affected.

At present, no official technical details have displayed. Ticketmaster has sent email reminders to affected customers. In order to further prevent the impact of expanding, all customers who receive emails must reset their passwords when logging in next time. Ticketmaster is currently working with security experts to try to resolve issues promptly. Also, they also set up a website individually to respond to customers’ questions about the Inbenta incident.

In the era of information explosion, numerous incidents of leakage have emerged one after another. The triggers may be hacking attacks, security holes, or malicious software. People also have to bear the hidden risks when enjoying a more convenient life. Experts suggest that, in addition to product problems, ordinary consumers who want to avoid being caught can regularly change their account login passwords for low participation, and should abandon their account numbers promptly. Pay attention to whether there are undisclosed deductions in their bills.

Source: theregister

Related coverage

  • Cybercrime Rampant: Novel Malware Attacks Triple in Frequency, BlackBerry Warns
  • WikiKit Phishing Kit Targets Major Industries with Evasive Techniques
  • UNC5812: Unmasking the Russian Operation to Sabotage Ukraine’s Military Recruitment
  • Cyber Threat Tactics Shift in 2023: What You Need to Know
  • Phishing Campaign Targets Crypto & Healthcare with ScreenConnect
  • From Sellers to Reviewers: Exposing the Fake Review Network
Track all actively exploited CVEs →

Support Our Threat Intelligence

Find our threat intelligence and malware analysis helpful? Support our work today and unlock a 100% ad-free reading experience!

Buy Me a Coffee Logo Buy Me a Coffee
Select your plan
Free Pro Team

Hover over a plan to see its benefits.

Get Zero-Hour Vulnerability Alerts

Critical CVEs, CVSS scores, and PoC updates — straight to your inbox every week.

We respect your inbox. Unsubscribe anytime.

SHARE
Share on FacebookShare on XShare on LinkedInShare on TelegramShare on BlueskyShare on Mastodon
Written by
@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.

Tags: Ticketmaster leak

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-102255CVSS 10.0
    A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access...
    Admin intel📅 Updated: Oct 9, 2026
  • CVE-2026-105133CVSS 6.9
    A vulnerability was detected in Ahsay AhsayCBS up to 10.3.2. This affects the function checkSysPwd of the file...
    Admin intel📅 Updated: Oct 9, 2026
  • CVE-2023-22894CVSS 4.9
    Strapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user details by exploiting...
    CISA KEV📅 Added to KEV: Oct 8, 2026
  • CVE-2016-3081CVSS 8.1
    Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled,...
    CISA KEV📅 Added to KEV: Oct 8, 2026
  • CVE-2015-3306CVSS 10.0
    The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the...
    CISA KEV📅 Added to KEV: Oct 8, 2026
  • CVE-2015-5477CVSS 7.5
    named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial...
    CISA KEV📅 Added to KEV: Oct 8, 2026
  • CVE-2021-3199CVSS 9.8
    Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server before 5.6.3, when JWT...
    CISA KEV📅 Added to KEV: Oct 8, 2026
  • CVE-2026-94504CVSS 7.2
    Ninja Forms 3.15.3 stores an anonymous non-RTE textarea value and renders it without safe HTML encoding in the...
    Admin intel📅 Updated: Oct 7, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-108598CVSS 9.3
    Floci 1.1.0 before 2.2.0 contains a code injection vulnerability in VtlTemplateEngine that allows unauthenticated attackers to execute commands...
    📅 Updated: Oct 13, 2026
  • CVE-2026-108549CVSS 9.2
    cc-connect through 1.5.0 contains a missing authentication vulnerability in the MAX platform adapter webhook mode in platform/max/max.go that...
    📅 Updated: Oct 13, 2026
  • CVE-2026-108268CVSS 9.1
    Enclave OS Virtual runs container workloads inside confidential virtual machines with end-to-end attestation. Prior to tdx-v0.2.43 and tdx-gpu-v0.6.27,...
    📅 Updated: Oct 13, 2026
  • CVE-2026-108265CVSS 9.1
    Enclave OS Mini is a Rust-based runtime for confidential applications inside Intel SGX enclaves. Prior to wasm-v0.40.0, the...
    📅 Updated: Oct 13, 2026
  • CVE-2025-50398CVSS 9.8
    Mercury D196G d196gv1-cn-up_2020-01-09_11.21.44 is vulnerable to Buffer Overflow in the function sub_404CAEDC via the parameter fac_password.
    📅 Updated: Oct 13, 2026
  • CVE-2025-50401CVSS 9.8
    Mercury D196G d196gv1-cn-up_2020-01-09_11.21.44 is vulnerable to Buffer Overflow in the function sub_404CAEDC via the parameter password.
    📅 Updated: Oct 13, 2026
  • CVE-2025-62863CVSS 9.8
    Ampere AmpereOne AC03 devices before 3.5.9.3, AmpereOne AC04 devices before 4.4.5.2, and AmpereOne M devices before 5.4.5.1 allow...
    📅 Updated: Oct 13, 2026
  • CVE-2025-62864CVSS 9.8
    Ampere AmpereOne AC03 devices before 3.5.9.3, AmpereOne AC04 devices before 4.4.5.2, and AmpereOne M devices before 5.4.5.1 allow...
    📅 Updated: Oct 13, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.