Enforcement · Information Commissioner (ICO) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Ticketmaster UK Limited: Insufficient technical and organisational measures to ensure information security

€1,405,000 Fine
Ticketmaster UK Limited
UNITED KINGDOM
Art. 5 GDPR Art. 32 GDPR
Security Personal Data Processing Agreement Supervisory Authorities
Nov 13, 2020 Source

How it connects

Related across sources

Case Law VG München - M 26a K 25.5210 Administrative Court Munich News AEPD (Spain) - EXP202500113 GDPRhub Guidance Opinion 15/2025 on the draft decision of the Austrian Supervisory Authority (AT SA) regarding the certification criteria of BDO Consulting GmbH EDPB Guidance Report of the work undertaken by the ChatGPT Taskforce EDPB Guidance Opinion 7/2024 on the draft decision of the German North Rhine Westphalia Supervisory Authority regarding the EU Cloud Service Data Protection (Auditor) certification criteria EDPB Case Law Deutsche Wohnen SE v Staatsanwaltschaft Berlin CJEU

Full text

Ticketmaster UK Limited has been fined GBP 1.25 million (approximately EUR 1.405 million) for failing to protect the personal data of its customers with adequate security measures. Potentially 9.4 million European customers could have been affected by a cyber attack between February 2018 and June 23, 2018 due to the use of an insufficiently secured chat bot hosted by a third party in its online payment site which allowed an attacker to gain access to customers' financial information. According to the Data Protection Agency, personal data such as names, full payment card numbers, Ticketmaster usernames and passwords, expiration dates and Card Verification Value (CVV) numbers were affected. The DPA also found that 60,000 payment cards belonging to Barclays Bank customers were subject to fraud, and several international banks also reported fraudulent activity to Ticketmaster.

Industry: Industry and Commerce

Original document at the source ico.org.uk

Similar Content