Ingresso Data Breach: Personal Information of 15 Million Ingresso Users Compromised

Ingresso is a leading Brazilian company specializing in online ticket sales for movies, concerts, soccer games, and cultural events. Founded in 1995 and based in Rio de Janeiro, Ingresso has grown to become the largest online and mobile movie ticketing service in Brazil. The company was acquired by NBCUniversal’s Fandango in 2015, and later by Universo Online (UOL), Brazil’s largest digital content and services company​ (PitchBook)​ (Celluloid Junkie)​ (The Raine Group)​ (Comcast Corporation).

Breach Details

What Happened?

In August 2024, Ingresso experienced a significant data breach affecting around 15 million users. A threat actor named "Captain Jacks" revealed the breach on a cybercrime forum.

Compromised Data

The data breach resulted in the exposure of the following sensitive information:

• Social Security Numbers (SSN)
• Names
• Phone numbers
• Email addresses

Threat Actor Profile

The threat actor, "captainjacks," is known for their involvement in cybercrime. By revealing the breach on a well-known cybercrime forum, captainjacks demonstrated a sophisticated understanding of cybersecurity vulnerabilities and data exploitation.

Impact Analysis

Immediate Consequences

• User Privacy: The compromised information poses a high risk of identity theft and fraud for affected users.
• Company Reputation: Ingresso's reputation is expected to take a significant hit, affecting customer trust and future business prospects.