Live Nation Told Vermont on October 1 That Social Security Numbers and Health Records Were Breached — Three Negligence Class Actions Followed Within a Week, but There Is No Settlement and No Claim Form

As of October 19, 2026, there is no settlement, no claim form and no payment connected to the new Live Nation data breach. What exists are three proposed class actions filed in Los Angeles federal court within two days of each other. If you searched “Live Nation of negligence breach,” this is the case you are looking for: the complaints accuse Live Nation of negligence and negligence per se, breach of implied contract and unjust enrichment. No class has been certified, and none of the allegations has been tested in court.

The trigger was a filing with Vermont. Each complaint opens by describing “a recent cyberattack and data breach involving personally identifiable information (‘PII’) and protected health information (‘PHI’)… which Defendant reported to the Office of the Vermont Attorney general on October 1, 2026,” and lists “Social Security numbers, Government ID numbers, and health records” as the data involved. Vermont’s public log lists two residents of that state; Music Business Worldwide notes the log gives no date for the incident and that the count “may increase as that company establishes the full total.” Billboard reported that no other state had posted a similar notice from Live Nation as of its press time.

Live Nation confirmed the incident in statements to Billboard and MBW: “Recently, we identified, contained and secured a cybersecurity incident. Following a thorough internal review and independent investigation by a leading cybersecurity firm, we found the incident was limited in scope and had no impact on our operations. The small number of individuals whose information may have been affected are being notified and offered support in monitoring their information.” The company has not said how many people were affected nationwide, when the breach happened, or whose records were taken.

The first complaint, Fraga, was filed on October 6, 2026; Gosman and Ramos followed on October 7. Different law firms filed them, but MBW, which reviewed all three, found them “almost word-for-word identical” — each runs 51 pages. Each plaintiff says they learned of the breach “after reading an article online.”

The detail that matters most for readers: two of the three plaintiffs are former Live Nation employees. Gosman’s complaint says he “is a former employee of Defendant and provided his Private Information to Defendant in connection with his employment,” and Fraga’s says the same of her. Only Ramos describes a different relationship — he “provided his Private Information to Defendant in connection with obtaining services from Defendant,” without saying which services. TicketNews pointed out that Social Security numbers, government IDs and health information “are types of records commonly maintained for employment, payroll or benefits purposes, while they are not normally required to maintain a standard ticketing account.” That does not prove only staff were hit, but it is a reason not to assume your Ticketmaster account was involved. Neither Live Nation nor the Vermont filing has said whether the people affected are employees, customers or someone else.

The complaints’ core allegations, all made “upon information and belief” where they go beyond public reports: that Live Nation “failed to even encrypt or redact this highly sensitive information,” that each plaintiff’s data “is available on the dark web,” and that “Defendant did not notify impacted people for over four months after learning of the Data Breach.” None of the complaints states when the breach occurred or when Live Nation discovered it. The proposed class is “All persons residing in the United States whose Private Information was compromised as a result of the Data Breach, including all persons who received Defendant’s Notice.” To get into federal court under the Class Action Fairness Act, each complaint states that the amount in controversy exceeds $5,000,000 and that the class has more than 100 members; that is a jurisdictional threshold, not a damages estimate.

Not at this point. The plaintiffs ask the court for actual, compensatory, statutory and punitive damages, “lifetime credit monitoring services for Plaintiff and the Class,” and orders requiring better data security and “future annual audits.” Those are requests. Data breach cases like this one usually move through consolidation, a motion to dismiss and settlement talks before any money is on the table, and nothing in the record suggests a settlement is near. In the public docket index we read on October 19, 2026, each case shows only opening papers — a civil cover sheet, a summons request and a notice of interested parties (in Ramos, a “Related Case(s)” filing as well) — and no assigned judge. That index can lag the court’s own system, so a later order may exist that we could not see.

There is no deadline to meet and nothing to file. You do not need to join a lawsuit to be part of a class if one is certified or settled later; class members are notified at that point. What is worth doing now:

• Watch your mail. Live Nation says affected people “are being notified.” If you get a letter, keep it — any future settlement will likely use the notice list to identify class members.
• Take the monitoring offer. The company says it is offering “support in monitoring their information.” We have not seen the letter, so we cannot tell you the vendor or the enrollment deadline; the letter itself will state both.
• Protect your Social Security number. Because the reported data includes SSNs and ID numbers, a credit freeze with the credit bureaus is the standard step; it makes it harder to open new accounts in your name.
• Former employees: since two plaintiffs worked for Live Nation, former staff should check old personal addresses and HR contacts for a notice.

Two Live Nation breaches are now in the news, and they are easy to mix up. The older one began when, according to Live Nation’s SEC filing of May 31, 2024, the company on May 20 found “unauthorized activity within a third-party cloud database environment containing Company data (primarily from its Ticketmaster L.L.C. subsidiary).” Ticketmaster told customers the database was accessed between April 2 and May 18, 2024. The federal lawsuits over that breach were consolidated in Montana in the multidistrict litigation over the Snowflake cloud breaches, where Ticketmaster and Live Nation are defendants, and Billboard reports those claims “remain ongoing in U.S. court.” TicketNews: “Nothing disclosed about the newly reported 2026 Live Nation incident has established a connection to that breach.”

The ticket-transfer failures that hit Ticketmaster users on October 2, 2026 are also separate as far as anyone knows; MBW found “no indication the two incidents are connected.”

What that means for your inbox: because there is no settlement in the new case, any email, text or social-media post offering you a “Live Nation data breach payment” or asking for your Social Security number or bank details to “claim” money is not from a court-approved administrator. A real class settlement comes with a court order, a dedicated settlement website and a named administrator, and it never asks for a fee. A real breach letter from Live Nation offers monitoring and tells you how to enroll; it should not ask you to confirm your full Social Security number by email.

What is Live Nation being sued for? Besides these three data breach suits and the Snowflake case, the biggest case is the government antitrust lawsuit. In May 2024 the Justice Department and a coalition of states sued Live Nation over its control of “venue ownership to event promotion to ticketing services through Ticketmaster.” The trial began on March 2, 2026; the Justice Department settled during the trial, and New York and a coalition of 33 other attorneys general carried on. On April 15, 2026, according to the New York Attorney General, the jury found that “Ticketmaster unlawfully maintains a monopoly in the market for ticketing services at major concert venues” and that Live Nation has a monopoly in large amphitheaters, and determined that New York fans were overcharged $1.72 per ticket. Live Nation has asked Judge Arun Subramanian to set the verdict aside or order a new trial; MBW reported on October 8 that he had heard arguments on July 31 and had not ruled. That case is about prices and competition. It does not cover data breaches, and this page does not track it.

Who owns Ticketmaster? Live Nation Entertainment does; Ticketmaster is its subsidiary. That is why the 2024 breach shows up in Live Nation’s SEC filings and why Live Nation is a defendant in the Snowflake litigation. The new 2026 suits name only Live Nation Entertainment, Inc.

What to watch next in the Los Angeles cases: a judge assignment, an order on the related-case filing in Ramos, and a motion to consolidate them under one lead case — the usual first steps. We will update this page when Live Nation discloses a nationwide count, when the cases are combined, or if a settlement is announced.