stubhub ticket theft exposed

While fans desperately scrambled for Taylor Swift tickets, a cunning cybercrime crew was busy orchestrating a major heist on StubHub’s platform. Between June 2022 and July 2023, thieves snatched over 900 concert tickets, mostly from Swift’s insanely popular Eras Tour. Talk about gaming the system.

The digital bandits didn’t stop at Swift. They also targeted events featuring Adele, Ed Sheeran, NBA games, and the US Open. Their haul? A cool $635,000 in illicit profits. Not bad for clicking a few buttons.

Authorities have nabbed two suspects: 20-year-old Tyrone Rose and 31-year-old Shamara Simmons. Rose worked for Sutherland Global Services in Jamaica—an offshore vendor for StubHub. Convenient access, right? Simmons operated from Queens, New York. Both face serious charges including grand larceny, computer tampering, and conspiracy. If convicted, they’re looking at 3-15 years behind bars.

Two insider thieves facing hard time for digital ticket theft—justice catching up faster than you can say “StubHub.”

Their scheme was surprisingly simple yet effective. They exploited a loophole in StubHub’s system, accessed a secure network area, and intercepted roughly 350 orders. This incident demonstrates why employee training is critical for preventing social engineering attacks that target third-party vendors. They redirected ticket URLs to accomplices’ emails, downloaded the goods, then resold them on the same platform at jacked-up prices. Sneaky.

StubHub eventually caught on and reported the scheme to authorities. They terminated their contract with Sutherland Global Services, replaced or refunded affected orders, and beefed up security measures. The company worked diligently to ensure customer trust restoration throughout the aftermath of the breach. Better late than never.

The case is now in the hands of New York prosecutors, with the Queens District Attorney’s Cybercrime unit leading the charge. The investigation continues as authorities hunt for additional culprits. Queens DA Melinda Katz has urged residents who may have been victims of this or similar schemes to report cybercrime incidents.

This cybertheft highlights major vulnerabilities in digital ticketing systems. The entire industry is likely sweating bullets, wondering if their security measures are adequate. Third-party vendors, especially, will face increased scrutiny.

Meanwhile, Swifties who thought scoring tickets was already hard enough now have a new worry. Turns out the real competition wasn’t other fans—it was criminals with backdoor access. That’s the ticket business for you.

You May Also Like

Legitimate RMM Tools: The Surprising New Weapon in Cyberattacks

Legitimate IT tools are now hackers’ favorite weapons, bypassing security with shocking ease. Why are criminals abandoning traditional malware for software your company already trusts? Your defense strategy might be obsolete.

How a Deceptive Email Pretends You’re Upgrading Your Coinbase Wallet

Learn how scammers hijack your crypto with an innocent-looking Coinbase email. The sinister twist? They trick you into importing their recovery phrase, handing over your wallet keys. Your funds vanish instantly.

Two Months of Deception: The BEC Scam That Went Unnoticed

A two-month deception orchestrated through email threads without a single malicious link—learn how criminals pocketed billions while trusted partners unwittingly played along. Spotting these attacks might save your company.

How TsarBot Stealthily Targets 750 Financial Apps to Steal Credentials

TsarBot: The Russian-built shadow lurking beneath 750 financial apps, silently swiping credentials while you type. Your banking pattern isn’t as secure as you think.