Hacker Used Claude AI to Score Free Tickets to Nearly Every US Music Show

Cybersecuritynews •Guru Baran • July 3, 2026

A critical unauthenticated SQL injection vulnerability in Front Gate Tickets (FGT), a Live Nation/Ticketmaster subsidiary that powers ticketing for major US festivals including EDC, Bonnaroo, and Outside Lands, allowed full administrative takeover of the platform with help from Anthropic’s Claude AI model. The researcher Ian Carroll noticed that nearly every major US festival funneled ticketing […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

AI-Assisted Ticketing Exploit Exposes Major US Music Festivals Ian Carroll, a security researcher, exploited an unauthenticated SQL injection vulnerability in Front Gate Tickets, a subsidiary of Live Nation, with assistance from Anthropic's Claude AI. This flaw allowed him to gain administrative access to the ticketing platform, potentially issuing unlimited tickets for major US music festivals, including Bonnaroo and Electric Daisy Carnival. The vulnerability stemmed from improper input sanitization in the device API, enabling Carroll to bypass the site's web application firewall. He discovered sensitive data, including employee login information and password reset tokens, but did not redeem any tickets. The incident raises significant concerns about the security of ticketing systems for large events. The vulnerability could allow malicious actors to access customer records and issue complimentary tickets. The researcher reported the issue without exploiting it further. 4 sources 68

Extracted Entities

Hacker Used Claude AI to Score Free Tickets to Nearly Every US Music Show

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CWE Weaknesses (1)

MITRE ATT&CK (1)

Tools (1)