Vermont’s attorney general lists exactly two Vermont residents on Live Nation Entertainment’s newest data breach filing, yet the categories attached to those two names are among the most sensitive a company can report: Social Security numbers, government ID numbers and health records. The notice was logged Oct. 1, 2026, and Live Nation, the concert promoter and venue operator that owns Ticketmaster, has so far said nothing publicly about it that could be located.
The entry gives no breach date, no nationwide headcount and no cause. What it does carry is the list of data types, and that list is the story.
A Two-Resident Filing in Vermont’s Security Breach Notices
On the Vermont Attorney General’s security breach notices page, the Oct. 1 entry for Live Nation Entertainment, Inc. is filed under “Other Commercial.” The date reported to the office is 10-1-2026, the number of Vermont residents affected is 2, and a note says that figure may rise as the company determines the total. The date-of-breach field is empty. The office no longer posts PDFs of third-party notices, so the letter sent to consumers is available only by emailing the attorney general’s security-breach address.
That arrangement leaves the national picture to be pieced together from other states. ClaimDepot’s tracker page for the incident lists notices to the attorneys general of California, Iowa, Maine, Montana, Nebraska, New Hampshire, Oregon, Rhode Island, South Carolina, Texas and Washington, in addition to Vermont and a Massachusetts filing, but its links are placeholders and it does not show what any of those filings say. It also notes that Live Nation has started contacting people by mail.
Health Records Beside Government ID Numbers
Vermont’s data-breached field names three categories and nothing else. A Social Security number supports identity theft and fraudulent tax filings on its own, and a government ID number adds a document that thieves use to pass identity checks. Health records are the outlier for a ticketing business, and the entry does not say whose records they are: employees, venue staff, or customers who shared medical details such as accessibility needs. Each of those groups would imply a different exposure, and the filing leaves the question open.
A law-firm page for the incident lists October 5 as the breach date and Oct. 1 as the discovery date, a breach date that would postdate the filing itself, and the Vermont entry supplies neither date. No company statement or independent news coverage of the Oct. 1 filing turned up at the time of writing.
The 2024 Ticketmaster Intrusion and a 2025 Sale Claim
Live Nation has disclosed a large breach before. In a filing with the Securities and Exchange Commission on May 31, 2024, it said it had identified unauthorized activity in a third-party cloud database environment on May 20, and that a “criminal threat actor” offered what it alleged to be company user data for sale on the dark web on May 27. Cybersecurity Dive reported that the data came mainly from Ticketmaster, and that the group ShinyHunters claimed a 1.3-terabyte dataset covering 560 million customers, a figure that was the seller’s claim and never confirmed by Live Nation.
The company said then that the incident was not reasonably likely to have a material impact on its business. CSO Online’s reading of that filing adds that Live Nation did not name the cloud vendor and did not say how many accounts were affected.
ClaimDepot also records a Sept. 4, 2025 post in which a seller calling itself ByteToBreach claimed to be selling Live Nation and Ticketmaster data, including names, emails, physical addresses, phone numbers, IP addresses and browser fingerprints. Nothing in the Vermont entry connects either episode to the October 2026 notice, and the fields claimed in 2025 do not include Social Security numbers or health records.
A Jury Verdict Six Months Earlier
The filing arrives after a separate legal defeat. On April 15, 2026, a jury found that Live Nation and Ticketmaster violated federal and state antitrust laws, according to a release from Vermont Attorney General Charity Clark, who led a coalition of 34 attorneys general. Clark said in the release that the verdict “is a win for consumers and for the marketplace.” Specifically, the jury found that Ticketmaster unlawfully maintains a monopoly in ticketing for major concert venues, that Live Nation holds a monopoly over large amphitheaters and ties artists to its promotion services, and that fans were overcharged for tickets at major venues nationwide. The Justice Department had settled with the company during the trial, while the states rejected that settlement and kept going.
The antitrust case and the Oct. 1 notice are unrelated matters, and the record so far shows two Vermonters, three data types and no explanation.
This article was produced with the assistance of AI and reviewed by Morning Overview editors prior to publication.
More from Morning Overview
- Regulators cleared the first U.S. small modular reactor, 4 months early
- Lake Powell sank to a record 3,517 feet, nearing the level that stops Glen Canyon Dam’s turbines
- Seven of Earth’s nine planetary boundaries are breached, and all seven are worsening
- The NSA says three phone features should be off whenever you aren’t using them
