The cybercriminals who claimed responsibility for the Ticketmaster data breach say they’ve stolen 440,000 tickets for Taylor Swift’s Eras Tour.
As proof, an entity using the handle Sp1d3rHunters, a merger of Sp1d3r and ShinyHunters who are both aliases associated with the breach, leaked 170k barcodes for free for Taylor Swift’s ERAS Tour. In a post on the infamous stolen data site BreachForums, Sp1d3rHunters is offering many thousands of tickets for upcoming Taylor Swift concerts in three cities in the US: Miami, New Orleans, and Indianapolis.
Read more…
Source: Malwarebytes Labs
Related:
- Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant
October 14, 2026
Unit 42 investigated a multi-stage network intrusion against a telecommunications organization that occurred in September 2024, which we are tracking as cluster CL-STA-0954 (aka UNC5820). The attackers behind CL-STA-0954 achieved an initial compromise by exploiting CVE-2024-47575 against a centralized FortiManager appliance. From that single appliance, our observations are that the attackers exfiltrated an archive containing running ...
- Hobbs and Whistles owner investigates hack that may have exposed customer data
October 13, 2026
The owner of Phase Eight, Hobbs and Whistles has said its websites and IT systems have been hit by a cyber-attack that may have compromised customers’ personal data. The South-African listed TFG London said it identified the “cybersecurity incident” at the three UK-based retail chains on Sunday. Its two other UK brands, Inside Story and White ...
- Hundreds of French supermarkets hit by cyberattack on refrigeration systems
October 12, 2026
Several supermarkets were forced to discard fresh and frozen food, Intermarché said, and have yet to estimate the losses. The Paris prosecutor has opened an investigation. Hundreds of French supermarkets belonging to the Intermarché and Coopérative U chains have fallen victim to a cyberattack targeting their refrigeration systems, the two retail giants said on Monday. Around 150 ...
- ‘123456’ password used in massive Danish CPR data breach
October 10, 2026
At least three accounts at the company linked to a major breach of Denmark’s CPR register reportedly used the password “123456”, including an administrator account. At least three user accounts at the Funen-based IT company Pays used the password “123456” when hackers gained access to Denmark’s CPR register, Politiken reports. One of them was the company’s administrator ...
- Shai-Hulud worm makes jump to AI infrastructure with Tensorlake compromise
October 8, 2026
The credential-hijacking Shai-Hulud worm has struck again, this time burrowing its way into a popular AI agent platform SDK. Multiple security researchers reported Thursday that they had detected Shai-Hulud infection in a recent release of the npm package for version 0.5.144 of Tensorlake’s SDK. That package has somewhere in the neighborhood of 12,000 downloads per week, ...
- UK and Germany launch joint-partnership to counter sabotage and cyber attacks
October 8, 2026
Prime Minister Andy Burnham will travel to Berlin today for talks with Chancellor Friedrich Merz, as the UK and Germany work together on technologies and industries that will drive growth in every UK postcode, and build resilience against shared threats. The UK and Germany are Europe’s two largest economies and biggest investors in defence and today ...