Ticketcounter ticketcounter.nl Ticketcounter data breach: what happened and what to do
Ticketcounter, a Dutch ticketing service, left a database backup publicly accessible, and it was downloaded in February 2021. Have I Been Pwned lists 1,921,722 accounts, with names, addresses, dates of birth, phone numbers and in some cases bank account numbers.
View all 13,115 breaches- Breach date
- 22 Feb 2021
- Affected
- 1,921,722
- Data exposed
- Bank account numbers, Dates of birth, Email addresses, Genders, IP addresses, Names, Payment histories, Phone numbers, Physical addresses
- Verified
- Yes
- Last updated
Source: Have I Been Pwned (CC BY 4.0)
Ticketcounter is a Dutch ticketing service for zoos, parks, museums and events. Have I Been Pwned lists 1,921,722 accounts from a breach it dates to February 22, 2021.
What happened
Ticketcounter inadvertently published a database backup to a publicly accessible location in August 2020. It was found and downloaded in February 2021. The company's CEO told BleepingComputer the database had been copied to a cloud server to test an anonymization process and was left unsecured. The data was offered for sale on a hacking forum, and the seller then demanded 7 bitcoins from Ticketcounter, threatening to release it publicly and alert its partners. Ticketcounter had already notified its clients.
What was exposed
1.9 million unique email addresses and, in some cases, names, physical and IP addresses, genders, dates of birth, payment histories, phone numbers and bank account numbers.
What that means for you
Bank account numbers, a date of birth and an address are a worrying mix: they're enough to attempt a fraudulent direct debit or to pass as you in a phishing call from "your bank". Payment histories show where and when you bought tickets, which scammers can use to fake a refund or cancellation message.
What to do if you were in it
- 1
Expect phishing that mentions Ticketcounter
Names, emails and phone numbers let scammers write believable messages. Treat unexpected emails and texts that mention Ticketcounter or your orders with suspicion, and go to the site directly instead of clicking links.
- 2
Tell your bank if your account number was exposed
If you paid by direct debit, ask your bank to watch for fraudulent debits and check your statements for ones you didn't authorize.
- 3
Be careful with calls from 'your bank'
Don't share codes or approve payments for a caller who knows your details. Hang up and call the number on your card.
- 4
Freeze your credit if you live in the US
A freeze at Equifax, Experian and TransUnion stops new accounts being opened with your date of birth and address. It's free.
- 5
Check whether your email or phone is in this and other breaches
Run a free Serus scan. Serus monitors breach databases and the dark web and alerts you when your data appears, so you hear about the next one early. It can't remove data from a breach, so the alert is the useful part.
Frequently asked
Was I affected by the Ticketcounter breach?
Check your email on Have I Been Pwned, which lists 1,921,722 accounts.
What was exposed?
Email addresses and, for some people, names, addresses, IP addresses, genders, dates of birth, payment histories, phone numbers and bank account numbers.
Was Ticketcounter extorted?
BleepingComputer reported that a seller demanded 7 bitcoins from Ticketcounter to stop the data being released.
Should I change my password?
Passwords aren't listed in the exposed data, but changing it is still sensible if you reuse it.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
