Overview
- MIFF and Ferve Tickets confirmed a breach of the Ferve platform that was first identified on May 29 and has resulted in some customers receiving unauthorised emails and SMS messages.
- Festival organisers say about 26,782 customer records may have been accessed, with exposed fields including names, email addresses, phone numbers and residential addresses.
- A user calling themselves '2019' posted to a hacking forum on May 30 claiming a much larger dataset of roughly 340,000 records is for sale, but that claim has not been verified by investigators.
- MIFF and Ferve say there is no evidence that account passwords or complete payment card details were taken, and they have suspended affected access, notified the Australian Signals Directorate and the Australian Cyber Security Centre, and contacted impacted customers.
- Security experts warn the incident shows how third‑party ticketing platforms concentrate personal data and raise phishing and identity‑fraud risks, and they advise customers to be wary of unexpected messages, change reused passwords, and consider contacting IDCARE for help.