Want CNET to notify you of price drops and the latest stories?

Ticketfly takes websites offline after hack and ransom demand

One ticket for the "Trouble With Cybersecurity" tour, please.

Alfred Ng Senior Reporter / CNET News
Alfred Ng was a senior reporter for CNET News. He was raised in Brooklyn and previously worked on the New York Daily News's social media and breaking news teams.
Alfred Ng
2 min read

TicketFly was hit by a hack and took its website offline.

Ian Knighton/CNET

Ticketfly has been grounded.

After a "series of recent issues," the online ticketing service took down all its websites Thursday, saying it was "the target of a cyber incident." 

"Out of an abundance of caution, we have taken all Ticketfly systems temporarily offline as we continue to look into the issue," the company said across its many properties. Ticketfly didn't comment on whether any user information, such as credit card data, had been stolen in the cyberattack. 

"We realize the gravity of this decision, but the security of client and customer data is our top priority," a Ticketfly spokeswoman said in an email.

The company's pages have been down since 6 a.m. ET.

A hacker who goes by "IShAkDz" has taken credit for the attack. Before Ticketfly took down its websites, the hacker left a taunting message across the service's website: "Your security down, I'm not sorry. Next time I will publish database." The hacker, who also left an e-mail address, appeared to have a database with more than 4,000 spreadsheets holding people's information, including email addresses, phone numbers, names and addresses.

In an email, the attacker told CNET that he or she contacted TicketFly about the potential exploit multiple times, but didn't hear back. The hacker said, "I want (them) to pay me to fix the exploit." The attacker demanded TicketFly pay 1 bitcoin to fix the cyberattack, which is currently worth $7,544.

The Ticketfly spokeswoman didn't comment on the alleged hacker.

Eventbrite, which owns Ticketfly, doesn't have any issues on its website. The company bought TicketFly from Pandora for $200 million in 2017. Pandora had purchased Ticketfly for $450 million in 2015. Eventbrite boasted that Ticketfly sells about 60 million tickets a year.

Ticketfly joins a long list of companies hit by hackers taking advantage of cybersecurity vulnerabilities. In April, TaskRabbit also shut down its app temporarily as it investigated a security breach, recommending that users change their passwords. 

Watch this: DHS secretary says US must fight back on hacking attacks

First published May 31, 9:37 a.m. PT.

'Hello, humans': Google's Duplex could make Assistant the most lifelike AI yet.

Cambridge Analytica: Everything you need to know about Facebook's data mining scandal.