Cybersecurity Firm Tracks Down $2M Ticketmaster Data Breach Hacker
Cybersecurity firm Mandiant is actively tracking "Judische," the hacker responsible for the massive Snowflake breach that affected Ticketmaster, AT&T, Lending Tree, and over 165 other companies.
Hacker targets Ticketmaster on computer
According to 404 Media, Judische has extorted approximately $2 million from companies by stealing their data and demanding payment for its deletion. The hacker released sensitive information from non-compliant companies, including Ticketmaster ticket data for events like Taylor Swift's 'The Eras Tour.'
Key developments in the investigation:
- Judische made critical errors in his proof-of-deletion videos, revealing his system's hostname
- Mandiant's senior threat analyst Austin Larsen identified and helped remove servers hosting stolen data
- AT&T paid $370,000 in ransom, while Ticketmaster's response remains unknown
- The hacker demanded $8 million from Ticketmaster
Mandiant's profile of Judische suggests:
- Male in his 20s
- Likely based in Canada
- Interests include video games, geopolitics, and catgirls
Law enforcement successes include:
- Shutdown of servers in Moldova
- Seizure of relocated servers in Ukraine
- Ongoing coordination between U.S. and international law enforcement
Gavel in courtroom
Hooded hacker in dark clothing
Hacker suspect arrested with computer money