Editorial draft v2 · Evidence reader R1
Historical disclosure scope: May 20 identification of unauthorized activity and May 27 alleged data-sale offer, described in a filing signed May 31, 2024. The publisher posting date and native SEC filing date remain unknown.
Live Nation reported unauthorized activity in a third-party cloud database environment containing company data, primarily from its Ticketmaster subsidiary. Its account connected a May 20, 2024 identification of the activity with a later offer of alleged company user data for sale. The retained filing describes an investigation and mitigation still in progress, rather than a completed assessment of all data involved. Issuer-hosted filing
Unauthorized activity and an alleged sale
Live Nation said it launched an investigation with forensic investigators after identifying the activity on May 20. On May 27, according to the company, a criminal actor offered what it alleged was company user data for sale on the dark web. The offer is an allegation about the advertised material. It does not establish that every advertised item was authentic, identify a victim population, or confirm a particular quantity of stolen records. Issuer-hosted filing
The filing identifies Ticketmaster L.L.C. as a subsidiary and the principal origin of the company data in the environment. That corporate relationship keeps the case coherent: the evidence describes one incident under Live Nation's account, rather than independently establishing a second Ticketmaster incident. The source does not name the cloud host or show that the provider's entire platform was compromised. Issuer-hosted filing
The company's response and the limits of its assessment
Live Nation said it was mitigating risks, had notified and was cooperating with law enforcement, and was notifying regulators and users as appropriate about unauthorized access to personal information. As of the filing's statement, it reported no material impact on overall operations or financial condition or results, and did not expect such an impact. It also said risk evaluation and remediation remained ongoing. The materiality statement should therefore retain that time and company attribution. Issuer-hosted filing
The selected source does not establish a named actor, exact affected-person count, full data categories, payment to an attacker, or final resolution. Editorial interpretation: its value lies in separating the company's confirmed identification of unauthorized activity from the actor's advertised claim, while showing how little the initial public account settled. Issuer-hosted filing
Sources
Live Nation filing — signed May 31, 2024; publisher posting date and native SEC filing date unknown.