science and technology
Cybercriminal who stole hundreds of concert tickets via StubHub vulnerability arrested
2025-03-07 01:14:04
Author: Webmaster Cloud Network
Taylor Swift's Eras tour ended last year after authorities arrested a pair of thieves who exploited a vulnerability in StubHub's backend to steal hundreds of tickets. According to TheHollywoodReporter, two cyber criminals have been arrested by police for stealing and reselling hundreds of digital tickets to different concerts and sporting events such as the US Open Tennis Open.
Tyrone Rose and Shamara Simmons were charged with grand larceny, computer tampering and conspiracy. If convicted, the two men could face 3-15 years in prison. Ross and Simmons are due to appear in court on Friday to plead guilty, but the police investigation will continue as they are said to have worked with multiple associates, at least one of whom is dead and another who has not yet been arrested.According to the Queens District Attorney's Office, Ross, Simmons and other members of the criminal gang obtained tickets by intercepting legitimate StubHub URLs generated after legitimate ticket purchases. These unearned URLs are then passed on to other participants in the scheme, who use them to resell tickets on StubHub.Between June 2022 and July 2023, the group successfully resold approximately 900 performance tickets, including tickets for performances by Swift, Adele and Ed Sheeran, for a total price of approximately $600,000. It's not entirely clear how the group's scheme began, but it appears they were able to discover the vulnerability because some of them worked for Sutherland Global Services, a Kingston-based IT contractor. After the news broke, StubHub terminated its working relationship with Sutherland.Queens District Attorney Melinda Katz said in a statement about the case that the gang wanted to "exploit the popularity of Taylor Swift's concert tour and other high-profile events to profit at a high cost to others."Katz added: "This operation highlights the vigilance of my office's Cybercrime and Cryptocurrency Unit and the importance of working with our industry partners to combat fraudulent activity and ensure consumer protection."