Thieves Hack 1,000 StubHub Accounts, Buy Tickets

StubHub website - marketplace for buyers and sellers of tickets for sports, concerts, theater and other live entertainment
NetPhotos/Alamy
By JENNIFER PELTZ

NEW YORK -- Cyberthieves got into more than 1,000 StubHub customers' accounts and fraudulently bought tickets for events through the online ticket reseller, a law enforcement official and the company said.

Arrests were expected in a case that sprawled across international borders, said the official, who wasn't authorized to discuss it ahead of arrests being announced and spoke on the condition of anonymity.

Manhattan District Attorney Cyrus R. Vance Jr. was expected to hold a news conference Wednesday with London and Royal Canadian Mounted Police officials. A spokeswoman for Vance's office declined to comment Tuesday night on the case, which comes amid growing concern about data thieves targeting retailers and other consumer giants.

StubHub, which is based in San Francisco, said that the thieves didn't break through its security -- rather, they got account-holders' login and password information from data breaches at other websites and retailers or from key-loggers or other malware on the customers' computers, spokesman Glenn Lehrman said.

The company detected the unauthorized transactions last year, contacted authorities and gave the affected customers refunds and help changing their passwords, he said.

It's unclear whether the digital prowlers then exploited their access to scoop up more information from the compromised accounts. The company and the law enforcement official wouldn't give further details Tuesday.

StubHub, owned by eBay (EBAY), is the leading digital marketplace for reselling concert, sports, theater and other tickets, offering brokers and fans a way "to buy or sell their tickets in a safe, convenient and highly reliable environment," as its website pledges. The company, which serves as an official secondary ticket market for such entities as Major League Baseball, this spring unveiled plans to become an event producer itself, selling tickets to a handful of its own concerts.

In the last year, major companies such as Target (TGT), LinkedIn (LNKD), eBay and Neiman Marcus have been hacked. Target, the nation's second-largest discounter, acknowledged in December that data connected to about 40 million credit and debit card accounts was stolen as part of a breach that began over the Thanksgiving weekend. Even Goodwill Industries found itself announcing last month that shoppers' payment card data might have been stolen.

Ticket-sellers also have been targeted. The event ticketing service Vendini last month settled a class action lawsuit related to a data breach in 2013.

Since many people use the same passwords at multiple retailers, hackers who get hold of a password for one site often try it at another, Lehrman said.

Authorities generally advise consumers to protect against possible identity theft from such breaches by keeping close watch on their bank statements and using credit card monitoring services, among other tips.


C-SUITE StubHub President

Increase your money and finance knowledge from home

Intro to different retirement accounts

What does it mean to have a 401(k)? IRA?

View Course »

Introduction to Preferred Shares

Learn the difference between preferred and common shares.

View Course »

Add a Comment

*0 / 3000 Character Maximum

9 Comments

Filter by:
crystalblue.judy

you have to use your flash drive and take germ levels down on your computer and internet terrorists have been adding germ levels to the internet and computers it gets hot and flocks the frequency-how do I know -eye witness like those recycled computers underground hooked into the banks with radar proof co axe cable and ofcourse they had help from inside Infact, I am eye witness to chase bank us bank and well fargo employees (cashiers) selling any and all information on american police and military and their families not that theres any legit cops left but whatever.

July 24 2014 at 12:38 AM Report abuse -1 rate up rate down Reply
MAD_DAWG1

I think it is funny.
Stubhub is no diferent than a scalper standing out side a game and selling tickets.

July 23 2014 at 3:00 PM Report abuse rate up rate down Reply
domegrp

This is one of the most pressing concerns now and law enforcement needs to act swiftly on these hacking cases - this threatens our financial security nationwide and could cripple our abilities at defense. Stop letting these hackers off with just a slap on the wrist.

July 23 2014 at 2:31 PM Report abuse -1 rate up rate down Reply
chitt9111

ovomit n his failed administration hacked n taxed the hail out of all middle class n stole all their houses with his record foreclosures n record unemployment for the last 5 plus years now n has to be removed from our white house in handcuffs in 2014 for any chance of America to recover from all his damage n devastation he caused our nation in the last 5 plus years now. !!!!

July 23 2014 at 8:55 AM Report abuse -2 rate up rate down Reply
3 replies to chitt9111's comment