The hacker collective responsible for a 2021 attack on one of India’s biggest crypto exchanges is demanding a ransom of $500,000 for over 1TB of customer data stolen from event ticketing giant Ticketmaster.
On Tuesday, the ShinyHunters group posted its ransom demand on cybercrime platform BreachForums. The listing allegedly contains banking information, financial transactions, and personal details of 560 million Australian Ticketmaster users.
ShinyHunters previously hacked Indian crypto exchange BuyUCoin and stole data relating to crypto transactions, banking information, passwords, and personal details from its users. The group has also targeted Pizza Hut and Wattpad.
Malware-focused X (formerly Twitter) account VX-underground claimed sources privy to the Ticketmaster hack revealed the breach took place in April. However, these same sources claim a separate hacking group is responsible for the attack itself and that ShinyHunters is just facilitating the auction of data.
VX-underground added, “Based on data provided to us by the threat group responsible for the compromise, we can assert with a high degree of confidence the data is legitimate.”
NME reports that Ticketmaster parent company Live Nation has failed to disclose if the reported attack has indeed taken place. Ticketmaster has, however, urged users to check their accounts.
The Australian government also announced that it’s now working with Ticketmaster and the FBI to help it “understand the incident.”