ShinyHunters, a notorious hacking group, is selling 1.3TB of data it claims to have been stolen from Ticketmaster. The dump contains the personal information and payment data of 560 million users and is up for sale on BreachForums for $500,000. In a post on X, vx-underground, an educational website covering malware and cybersecurity, claims to have spoken to some of the threat actors involved in the breach. These talks allegedly revealed that an unidentified hacking group managed to access TicketMaster's AWS instance by pivoting from a Managed Service Provider sometime in April. It was also uncovered that ShinyHunters is only acting as a proxy for this threat group to auction the data but was not involved in the compromise themselves. vx-underground also stated that they believe "with a high degree of confidence the data is legitimate," based on information provided by the threat group.