Ticketmaster confirmed that a security incident occurred, resulting in the exposure of personal data of customers who purchased tickets in 2025. The company proceeded to notify the affected users via email and also communicated the occurrence to the National Data Protection Authority (ANPD).
According to the company itself, the incident originated from a third-party data analysis tool. An investigation was conducted with the help of external cybersecurity specialists and was finalized in September 2026, as detailed in the communication sent to customers.
The affected information varies depending on the data provided at the time of ticket purchase. Ticketmaster assures that the exposed data does not include full credit card numbers, bank account information, or access credentials to the platform accounts. Furthermore, the company guaranteed that its account management and ticket sales systems remained intact.
In response to Olhar Digital, Ticketmaster reaffirmed having notified the ANPD and highlighted that it implemented actions to control the incident. The company also provided guidelines to affected customers aimed at protecting them, while also strengthening its data security practices.
Although Ticketmaster Brazil confirmed notification to fans affected by this incident involving the third-party data analysis tool, it did not disclose the exact number of people affected. The platform reinforces that fan account systems and ticket sales were not compromised, and that the leak did not cover sensitive data such as full credit card numbers, bank accounts, or access credentials.
Customers are advised to carefully monitor any suspicious communication that may attempt to use the exposed data, remembering that official channels will never request passwords, payment methods, or other confidential information without prior notice. For clarification, customers can contact the email incidente-dados@ticketmaster.com.br.
