Ticketmaster Data Breach Lawsuit 2026 - Snowflake MDL 3126 Update

Quick Facts

• Case: In re: Snowflake, Inc., Data Security Breach Litigation
• MDL number: MDL No. 3126 (No. 2:24-md-03126)
• Court: U.S. District Court for the District of Montana
• Judge: Chief Judge Brian M. Morris
• Defendants: Live Nation Entertainment, Inc.; Ticketmaster LLC; Snowflake, Inc.
• Breach window: April 2 - May 18, 2024
• Data exposed: Names, emails, phone numbers, addresses, event and order history, and partial payment card data
• Status: Active litigation - no class certified, no settlement
• How to participate: Retain a plaintiffs attorney experienced in data breach class actions

If you've ever bought tickets through Ticketmaster, your personal data may have been swept up in one of the largest known data breaches in history. The companies behind the incident - Ticketmaster, its parent Live Nation Entertainment, and cloud storage provider Snowflake - are facing consolidated federal litigation in Montana. No settlement exists yet, but the court cleared the key legal claims to move forward after a ruling in late 2025.

What Happened

Between April 2 and May 18, 2024, hackers gained unauthorized access to a Ticketmaster database stored on Snowflake's cloud infrastructure. Ticketmaster says it discovered the breach on May 23, 2024, and began notifying affected customers in early July 2024.

A hacking group called ShinyHunters claimed to have obtained data on 560 million Ticketmaster customers, which it offered for sale on dark web forums. Ticketmaster has not confirmed that figure - its official notice to Maine regulators listed more than 1,000 affected Maine residents - but the company acknowledged that names, email addresses, phone numbers, physical addresses, event history, and limited payment card data were exposed.

The payment card data exposure was limited to card type, expiration date, and the last four digits of card numbers, some of it encrypted. Full card numbers and CVV codes weren't part of what Ticketmaster acknowledged. Still, the volume of personal contact information - linked to detailed purchase histories - created real risk for targeted phishing scams aimed at music and sports fans.

On October 1, 2026, Live Nation filed a new data breach notice with the Vermont Attorney General describing a separate incident involving Social Security numbers, government ID numbers, and health records. That newer breach isn't currently part of MDL 3126.

How the MDL Formed

The first lawsuits were filed in the Central District of California in late May and early June 2024, within days of Ticketmaster's initial disclosure. The Judicial Panel on Multidistrict Litigation consolidated cases from across the country into MDL 3126 before Chief Judge Brian M. Morris in the District of Montana in October 2024.

Other companies caught up in the broader Snowflake breach have settled their cases separately. Advance Auto Parts settled its related claims. AT&T reached a $177 million resolution over its own Snowflake-connected breach. Neiman Marcus also resolved its cases. The Ticketmaster track of MDL 3126, targeting Live Nation, Ticketmaster, and Snowflake directly, remains active and unsettled.

Where Things Stand in 2026

The defendants moved to dismiss the consumer lawsuits early in the MDL. Chief Judge Morris issued his ruling on October 28, 2025. The court dismissed the breach-of-contract claim and one California unfair competition claim, but denied Snowflake's motion to dismiss entirely and kept the negligence claims, California Consumer Privacy Act claims, and state consumer protection claims alive.

Surviving those motions is a meaningful milestone. The court found that the core theories of liability - that Ticketmaster, Live Nation, and Snowflake failed to adequately protect customer data - are legally viable. The case is moving through discovery now, though no class has been certified and no settlement discussions have been publicly announced.

What Ticketmaster Customers Should Know

There's no claim form to file right now. No settlement exists and no claims process has been set up. If a settlement is eventually reached, affected Ticketmaster customers may be able to file claims at that point.

In the meantime: use the 12 months of free identity monitoring that Ticketmaster offered after the breach. Check your payment card statements for unfamiliar charges and report them immediately. Be skeptical of emails, texts, or calls mentioning concerts, Ticketmaster refunds, or ticket offers - phishing attacks targeting breach victims often spike long after the original incident.

If you suffered actual financial harm tied to this breach - identity theft, fraudulent charges, or credit damage - you may have a stronger individual claim. Contact a plaintiffs attorney who handles data breach cases for an evaluation. Most offer free initial consultations on a contingency basis.

What to Watch For

The next major milestones in MDL 3126 will likely be class certification briefing and the court's decision on whether to certify a consumer class. That ruling will significantly shape the case's path - and its settlement value. ClaimActions will update this article as the MDL develops.

Sources: In re: Snowflake, Inc., Data Security Breach Litigation, MDL No. 3126 (D. Mont.); openclassactions.com; Ticketmaster Maine AG breach notice (June 2024); JPML transfer order (Oct. 2024); Chief Judge Morris ruling (Oct. 28, 2025); Vermont AG Live Nation notice (Oct. 1, 2026)