Data that is claimed to be from Australian ticketing vendor TEG has been put up for sale on a website, with the poster asking US$30,000 (A$45,032) for the whole lot.
The data is claimed to include the name, gender, business, date of birth, username and hashed password of users among others. It was posted on 20 June.
The theft of the data was acknowledged by TEG on 31 May in a detailed note which said the data had been stolen from a third-party vendor.
"Ticketek has secure encryption methods in place for all passwords and no Ticketek customer account has been compromised," the company said.
{loadposition sam08}"Additionally, Ticketek utilises secure encryption methods for online payments and uses a separate system to process online payments, which has not been impacted. Ticketek does not hold identity documents for its customers.
"Since our third party supplier brought this to our attention, over the past few days we have worked diligently to put every resource into completing an investigation so that we can communicate with customers who may have been impacted, and other stakeholders, as quickly as possible.
"The available evidence at this time indicates that, from a privacy perspective, customer names, dates of birth and email addresses may have been impacted."
Ticketek's US outlet was claimed to have been compromised through the theft of credentials from a data storage vendor known as Snowflake.
A number of companies whose data was compromised in a similar way have now been hit by demands for money.
iTWire has contacted TEG to inquire about the exact business relationship it has with Ticketek.