Ticket To Cash, a ticket reselling platform, left an unprotected database online containing over 520,000 customer records and approximately 200 GB of data. The exposed files included PDFs, JPGs, PNGs and JSON documents such as concert and live event tickets, proof of ticket transfers, receipts and user-submitted screenshots. Some records contained personally identifiable information including full names, email addresses, postal addresses and partial credit card data. The database was discovered by cybersecurity researcher Jeremiah Fowler, who alerted the company. After a follow-up notification, Ticket To Cash finally secured the database, but it is unclear how long the data remained accessible or whether threat actors accessed it. Affected users are advised to monitor their financial statements and watch for signs of identity theft, phishing or fraudulent transactions.