Hacker Linked to Ticketmaster Snowflake Breach Pleads Guilty in 165-Company Attack
Home » Hacker Linked to Ticketmaster Snowflake Breach Pleads Guilty in 165-Company Attack
By Dave Clark1 day ago
Ticketmaster logo over a dark background with simulated computer code in green text.
A Canadian hacker tied to the sprawling 2024 cyberattack campaign that included the massive Ticketmaster data breach has pleaded guilty to four federal charges, admitting his role in the theft of billions of sensitive records and an extortion scheme that collected millions of dollars from victim companies.
Connor Riley Moucka, 26, of Kitchener, Ontario, pleaded guilty Aug. 5 to computer fraud, wire fraud, aggravated identity theft and a related conspiracy, according to the U.S. Department of Justice. He is scheduled to be sentenced Oct. 27.
The plea marks a significant development in a hacking campaign that first drew widespread attention in the ticketing industry after data associated with hundreds of millions of Ticketmaster customers was offered for sale online in 2024.
According to prosecutors, Moucka and his co-conspirators used stolen login credentials between February and October 2024 to gain unauthorized access to cloud-hosted data belonging to at least 165 customers of a U.S.-based software-as-a-service company. The Justice Department does not name the cloud provider in its latest announcement, but the campaign has previously been identified as targeting customer accounts hosted by Snowflake.
That distinction has been a point of contention since the Ticketmaster breach first surfaced. Snowflake said in June 2024 that investigators had found no evidence that a vulnerability or security failure within its underlying platform caused the attacks. Instead, investigators said attackers appeared to be using credentials obtained elsewhere to target accounts that lacked multi-factor authentication.
Prosecutors now say the group used that access to steal terabytes of data containing billions of records, including financial information, payroll records, driver’s license and passport numbers, Social Security numbers, call and text-history records and other personally identifiable information.
The attackers then threatened to publish stolen information unless victims paid ransoms and separately advertised data for sale on cybercrime forums and Telegram, according to DOJ.
The conspiracy generated more than $2.5 million in ransom payments, with Moucka personally receiving at least $495,000, prosecutors said. DOJ puts the direct losses suffered by victim companies at more than $9.5 million, excluding losses suffered by their customers. Prosecutors said the affected companies collectively had at least 100 million individual customers whose information was implicated in the conduct admitted as part of the case.
Ticketmaster Breach Put Snowflake Campaign in Spotlight
At the time, the group ShinyHunters claimed to possess approximately 1.3 terabytes of Ticketmaster data associated with as many as 560 million customers worldwide, including names, addresses, phone numbers, payment information and other account data. Live Nation Entertainment subsequently confirmed in an SEC filing that it had identified unauthorized activity in a third-party cloud database containing Ticketmaster data on May 20, although the company did not independently confirm all of the hackers’ claims about the scope of the stolen material.
Ticketmaster later notified affected customers that it had determined an unauthorized third party obtained information from a database hosted by a third-party data services provider. The company said its investigation placed the unauthorized activity between April 2 and May 18, 2024.
As the breach unfolded, hackers made additional claims involving Ticketmaster ticket inventory and barcodes, including assertions that they possessed hundreds of thousands of Taylor Swift tickets. Ticketmaster disputed some of those claims and said its rotating SafeTix barcodes could not simply be copied and reused.
The criminal investigation eventually put names to individuals prosecutors said were behind the broader Snowflake campaign.
Canadian authorities arrested Moucka in October 2024 at the request of the United States. He and alleged co-conspirator John Erin Binns were subsequently indicted in the Western District of Washington on charges involving computer fraud, wire fraud, aggravated identity theft and related conspiracies.
Moucka initially fought the U.S. case from Canada before consenting to surrender for extradition in March 2025. DOJ says he was extradited to the United States in July 2025, where he initially pleaded not guilty before changing his plea this month.
His guilty plea carries a mandatory minimum sentence of two years on the aggravated identity theft charge, while the remaining counts carry maximum penalties of up to 30 years in prison. The eventual sentence will be determined by a federal judge under federal sentencing guidelines.
The case is not entirely finished. Binns, Moucka’s co-defendant, is not currently in U.S. custody, according to the Justice Department’s case docket.
The U.S. small-business economy is stuck in neutral, with any improvement coming from customers buying more rather than from a boost in foot traffic, according to a key performance index calculated by the big transaction processor Fiserv Inc.
The company’s Small Business Index registered at 145.3 for July, up 1.6% from July last year and a 0.2% improvement from June. The transaction index alone was calculated at 103, down a notch from 104 a year ago. Overall, growth is coming from higher tickets rather than more customers, according to Prasanna Dhore, Fiserv’s chief data officer.
“Consumers remain engaged, particularly in select retail categories, but continued pressure in restaurants and the shift toward value-oriented spending show households are being more selective with where and how they spend,” Dhore says in a statement.
This higher tickets, flat customer count story has unfolded with particular force in the restaurant category. Here, average tickets were 2.8% higher year-over-year while the transaction count slipped 3.6%. This trend has been particularly acute for limited-service restaurants, where sales dropped 3.4% year-over-year as transactions slipped 5.3%, according to the Index.
Gasoline sales are up 14.2% year-over-year owing to a 15.4% rise in average tickets, as the Iran war’s effect on the industry unfolds. Overall retail sales rose 1.9% over this time last year despite a 0.8% slip in average tickets, as transactions increased 2.2%. “Households remained willing to spend selectively,” the Fiserv report says.
The latest results underscore the importance of the trend among consumers to ring up higher average spending per sale. “July’s results reinforce a consistent theme in 2026. Small businesses are still growing, but growth is increasingly dependent on higher tickets rather than stronger traffic,” Dhore says in a statement.
As payments executives wrestle with fast-moving trends in AI-driven commerce and in cryptocurrency, particularly stablecoins, card networks are gearing up to win more business in both markets. And network executives see those trends accelerating, creating opportunities to grab market share if they act fast.
“Agentic commerce is the next evolution in payments, a significant opportunity for Mastercard,” said Mastercard chief executive Michael Miebach early Thursday. “It means more transactions.” More important for networks like Mastercard, “we expect cards will prevail in an agentic world,” he told equity analysts during a review of his company’s June-quarter results. In agentic commerce, bits of code called AI agents shop and pay on the Internet on behalf of consumers.
Nor is Mastercard ignoring a similar opportunity in stablecoins, a form of cryptocurrency that mirrors the value of underlying fiat money, such as the U.S. dollar. Mastercard already handles settlement of stablecoins on its network, Miebach stressed, but it’s going farther with its pending acquisition of BVNK, a London-based company that enables merchants to accept stablecoins at checkout with conversion to the local fiat money. Mastercard has agreed to pay $1.5 billion for the company, with a contingent earnout of $300 million. The deal is expected to settle by year’s end.
“We still need conversion to fiat, and that’s what BNVK will do for us,” Miebach said. “We’re very excited about it.” Still, he added, a stablecoin capability “isn’t the answer to everything.” Mastercard, like its rival Visa, has been active in digital currencies for several years, and now, Miebach said, the network’s crypto volume has tripled over the past two years. “There’s a clear need for stablecoins,” he told the analysts on the call, singling out peer-to-peer transactions as a focus.
Miebach’s summary of the discussion boiled down to one declaration: “Agentic commerce and stablecoins will shape the future of payments,” with cards remaining an essential medium for both.
For the quarter, Mastercard reported $2.88 trillion in global transaction volume, up 9% from the same period last year. U.S. volume came to $858 billion, up 5.5%. The network reported 739 million cards (Mastercard and Maestro) in circulation in the U.S., up 4.8%; worldwide, 3.46 billion cards, a 7.2% increase. Net revenue totaled $9.3 billion, a 12% increase, with net income totaling $4.4 billion, up 16%.
Verifone Inc. announced early Thursday it has been awarded a U. S. patent on technology that protects point-of-sale terminals and unattended payment devices from card skimming. The move comes as estimates indicate skimming losses grew 5% last year, reaching approximately $1 billion in the U.S. market.
In skimming attacks, bad actors use hard-to-detect devices they insert into the card slot of a payment device or ATM to pick up account data related to the card. The data can then be used in the creation of fake cards. The crime is hard to detect, while longstanding preventive measures such as physical seals, sensors, or manual inspections “can be bypassed by an attacker who knows where to look,” according to Verifone.
“Instead of asking a terminal to detect a specific type of attack, we asked it to autonomously recognize when its own physical environment has changed in a suspect or unnatural way,” says Will Morgan, Verifone’s chief information security officer, in a statement.
The new detection technology, called Wireless Tamper Detection, is aided by the radio capability already installed in many more recent payment terminals, says New York City-based Verifone. That allows the anti-skimming technology to be installed without the need for additional hardware, the company says. The patent number for the device is 12,664,553.
The new detection technology can be provided through software rather than requiring hardware, Verifone says, because most modern payment terminals already feature radio capability.
Verifone, founded in 1981, commands an estimated 30% share of the U.S. retail POS terminal market. It was acquired by Francisco Partners in 2018 for $3.4 billion.
In related news, the Singapore-based POS technology provider SUNMI announced software that enables merchants to attend to ordering and other tasks on a main terminal while accepting contactless transactions on a separate device.
The move is part of what the company calls an expansion of its SoftPOS platform aimed at adding contactless-payment capability to a greater range of commercial payment devices. SoftPOS depends on software already installed in consumer devices to accept payments. Some 24% of POS providers offer softPOS, up from 16% in 2025, according to TSG, an Omaha, Neb.-based payments-research firm.
Datacap Systems Inc. is entering the softPOS arena with its new SureTap point-of-sale application, with which merchants can use their own devices. Any new transactions made with the application will contribute to the other bit of Monday’s POS news. The total value of global POS transactions are forecasted to reach $41.1 trillion in five years, says Juniper Research.
Chalfont, Pa.-based Datacap says SureTap enables merchants to use their own compatible devices, such as smart phones, as the hardware component in a transaction without having to buy or lease a dedicated POS terminal. Datacap says SureTap supports contactless transactions on NFC-enabled Android devices and relies on its payment gateway for connectivity to multiple processors.
Datacap says SureTap distinguishes itself in that the transaction data is not isolated just to the app. The data connects to Datacap’s platform to give merchants a unified view of the transaction regardless of which payment method was used.
SureTap uses the same API code used for traditional card-present terminals to ease the integration into the merchant’s POS system, Datacap says. Other features include consolidated reporting with other payment methods. Also, independent software vendors marketing SureTap control the pricing and retain customer ownership, Datacap says.
“By connecting softPOS support with credit, debit, ACH, eCommerce, and gift transactions via a unified commerce platform, SureTap helps our partners enable the full range of use-cases for their merchants; from in-store and mobile checkout to online and recurring payments, all via a single, seamless payments engine,” Justin Zeigler, Datacap vice president of product, says in a statement.
In related news, the value of global POS transactions are forecasted by Juniper Research to reach $41.1 trillion in 2031, a potential 37% increase from $30.1 trillion in 2026.
A German court has ordered FIFA to overhaul its 2026 World Cup ticketing operations, ruling that the organization’s sales platforms employed misleading pricing, obscured key information, and utilized aggressive, unlawful sales tactics.
The preliminary injunction, issued by the Frankfurt am Main Regional Court on July 13, prohibits FIFA from continuing these practices for consumers in Germany. The order follows a challenge by the secondary ticket marketplace Ticombo, which argued that FIFA was violating standard consumer-protection and transparency laws that govern the broader ticketing industry.
The ruling puts FIFA in an awkward position. Major sports bodies have long pushed to centralize ticket resale within their own closed systems, often characterizing independent marketplaces as the source of industry abuses. The Frankfurt decision serves as a blunt reminder that the same transparency standards used to police third-party platforms apply equally to event organizers managing their own primary and secondary markets.
“This decision does not create new, special laws,” said Marçal Gutiérrez Balle, Ticombo’s head of legal. “It simply applies existing European requirements, such as the Digital Services Act, to a dominant organizer. It is a powerful reminder that everyone in this industry, including major event organizers, must abide by the same rules of fair competition.”
A request for comment on the injunction sent to FIFA’s media relations staff did not receive a reply as of Wednesday afternoon.
Targeting Deceptive Purchase Flows
The court took issue with specific features on both FIFA’s “Last-Minute Sales” platform and its official resale marketplace.
On the primary sales site, the court barred FIFA from advertising “from” prices when no tickets were actually available at that rate. Ticombo cited an example where tickets were marketed as starting at $1,745, only for the price to jump to $8,995 once a user entered the purchase flow. The court also ruled that FIFA cannot force buyers to commit to a seat before disclosing the final total cost, a practice it found violated German unfair-competition standards.
Furthermore, the court labeled the platform’s high-pressure design as an “aggressive commercial practice.” This included a rigid, six-minute countdown that, if expired, forced users back to a waiting queue—losing all progress and requiring a complete restart, including a new CAPTCHA. FIFA’s “Book the best seat” feature further exacerbated the issue by defaulting to the most expensive option without showing individual seat prices, a combination the court deemed unfairly coercive.
“This injunction clearly establishes that FIFA’s manipulative ‘dark patterns’ (such as bait-and-switch pricing and predatory countdowns) are unlawful,” Balle said.
Mandatory Disclosure for Commercial Sellers
The ruling also mandates that FIFA disclose the identity and address of any commercial sellers on its official resale marketplace before a transaction is finalized.
While official platforms are often presented as safe, fan-to-fan alternatives, the legal obligations change when professional traders are involved. The court found that under the EU’s Digital Services Act, FIFA is required to provide the identity of these commercial sellers—a transparency measure that official channels had previously bypassed.
Ticombo initiated the challenge after discovering that remaining ticket inventory from national football associations was being funneled into FIFA’s resale platform without proper identification of the sellers. The court agreed with Ticombo’s assessment, officially recognizing the two entities as competitors under German law.
Because this is a preliminary injunction issued without an oral hearing—due to the time-sensitive nature of the tournament—it is not a final judgment. The order is also geographically limited to FIFA’s operations involving German consumers. FIFA has the right to challenge the ruling, though it did not submit comments when initially prompted by the court.
Ticombo stated it does not intend to pursue monetary damages, as the tournament concludes this week. However, the ruling serves as a vital signal: while organizers may control the ticket inventory and the sales channels, they remain subject to the same consumer-protection laws as everyone else.
“We hope this will change FIFA’s ticketing practices moving forward,” Balle said.
A newly released standard for QR code payments could make it easier for consumers and merchants to use instant payments, says the Accredited Standards Committee X9 Inc. X9 is a nonprofit organization that develops and maintains national and international standards for the financial-services industry.
The new standard, officially called X9.150, Merchant-Presented QR Codes for Secure Payment, will allow every bank or merchant app with a QR code reader or generator to be used for secure payments with anyone, anywhere in the United States, X9 says. It could be especially helpful in making account-to-account payments. Work on the X9.150 standard began in 2024. X9 says approximately 45 million instant payments are made each month in the United States, compared with eight billion in Brazil.
There has been no standard for secure merchant-generated QR codes in the U.S. prior to this new standard, the committee says. That has meant little interoperability among businesses and financial networks, likely stymieing use. The X9.150 standard provides a common framework for financial institutions and payment providers to determine the most appropriate payment method, the committee says.
This type of QR code is distinct from ones that navigate a user to a URL, X9 says. “Unlike URL QR codes, payment QR codes must be scanned from within an authenticated mobile app (e.g., that of a bank, credit union or merchant wallet) where the user has logged in and the application itself is recognized as an authorized client. This ensures that both the payer and the application making the request are trusted before the protected payment payload can be accessed,” X9 says in a statement.
The new X9.150 standard defines the structure, content, and security requirements for merchant-presented QR codes for initiating push payments. A major benefit of the standard is that the same QR codecan initiate payment across different account-based payment methods, which means merchants do not need to support separate payment protocols for each network.
“Businesses want to get paid faster while making it as simple as possible for consumers to pay. This standard creates a foundation for delivering both. As adoption grows, businesses will be able to offer a consistent payment experience while financial institutions retain the flexibility to choose the payment networks that best serve their customers,” says Sarah Hoisington, chair of the X9.150 Work Group and general manager, North America at Matera, a specialist in QR code payment tech, in a statement.
Visa Inc. has taken steps to make smart phones a more readily available way for merchants, especially micro-size ones, to digitally accept payments with updates to Visa Pay, Visa Accept, and Visa Direct.
With Visa Accept, announced in April 2025, Visa makes it easier for these small sellers to get paid to their eligible Visa debit cards from any NFC-capable smart phone. Visa Pay connects any participating wallet to any Visa-accepting merchant, local or international, in-store or online. Visa Direct is the brand’s near real-time payment service to cards. Now, businesses can send payouts, such as compensation for contractors and staff, and consumer refunds, using their phones.
Visa Accept is an entry-level acceptance service for micro-sellers and very small businesses that might not be ready for a traditional merchant, Rubail Birwadker, Visa’s global head of growth, tells Digital Transactions News via email. “Sellers enroll through a participating issuing bank’s digital banking app using an eligible Visa Debit or reloadable prepaid credential. As sellers grow and reach market-specific thresholds, they can be offered an upgrade path to a full merchant solution with more advanced features,” Birwadker says. Sellers can receive funds in minutes, he says.
Sellers need a smart phone that can support their bank’s app and payment method, such as tap-to-pay, QR code, or payment link. “Specific device requirements may vary by market, issuer and implementation, but the core idea is to let sellers accept payments using the phone they already rely on, without adding separate point-of-sale hardware,” he says. Visa Accept merchants can use their bank’s app to accept payments without extra hardware or a dedicated payment-acceptance app. Visa says the same buyer protections, security practices, and dispute protections apply to Visa Accept transactions.
Visa Accept transactions are sent over Visa’s network and use Visa Direct to move funds to the seller’s account, he says. “Sellers are subject to market-specific transaction or sales thresholds; once those thresholds are reached, they can be prompted to upgrade to a fuller merchant solution. The limits are designed to keep the experience appropriate for entry-level sellers while creating a path for business growth,” Birwadker says.
Visa Accept is available in more than 25 countries and live with banks in Sri Lanka, Guatemala, and Vietnam, with others in Kenya and Ghana expected to launch in coming weeks.
Merchants wrestle with fraud every day, lamenting how much is lost in each bad transaction. LexisNexis Risk Solutions, as it’s done for a number of years, has quantified the actual cost beyond the item’s value.
In 2026, the total cost of every $1 in fraud is $5.13 in the United States and $5.23 in Canada for retailers and e-commerce merchants. That is up from $4.61and $4.52, respectively, from 2025. This marks the first time the $5 threshold has been crossed in both markets, the company says.
What’s changed is that new attack vectors are having an impact. LexisNexis Risk Solutions says fraud risk is increasingly distributed in digital and physical channels, payment types, and customer touchpoints.
“Online and mobile channels now account for most fraud costs, representing up to 83% for e-commerce merchants. Common fraud types include chargeback fraud, lost or stolen merchandise and fraudulent returns, reflecting the breadth of threats facing merchants today,” the Atlanta-based company says.
For U.S. retailers, the top three fraud loss types were chargeback fraud at 12%, and lost or stolen merchandise and fraudulent requests for a return or refund, each at 11%. It was similar in Canada with chargeback fraud at 14%, lost or stolen merchandise, 14%, and scams and impersonation fraud at 13%.
For U.S. e-commerce operators, chargeback fraud accounted for 12% as did first-party fraud, followed by lost or stolen merchandise, 11%. In Canada, fraudulent requests for a return or refund accounted for 16% of fraud losses, followed by scams and impersonation fraud at 16%, and chargeback fraud at 14%.
Payment cards, in both countries, accounted for large shares of fraud losses by payment type.
Card transactions, at 26%, garnered the biggest share of fraud costs by payment method for U.S. retailers, and rose to 31% for U.S. e-commercemerchants. In Canada, card transactions were cited in 43% of fraud losses for retailers, though digital wallets, at 26%, outpaced cards at 20% for Canadian e-commerce merchants.
Additionally, the cost of fraud has increased substantially over time. It was at $2.40 in 2016 and now has more than doubled.
Live Nation and Ticketmaster logo over an image of a concert crowd
The Department of Justice has released the fine print of its proposed Live Nation–Ticketmaster settlement, detailing a no-breakup agreement that critics say leaves Ticketmaster at the center of the ticketing ecosystem despite years of government allegations of monopolistic conduct.
The proposed final judgment, filed Friday in federal court in Manhattan and included at the end of the article, formalizes the framework the DOJ reached earlier this year with Live Nation Entertainment and Ticketmaster. The agreement is backed by the DOJ and six settling states: Arkansas, Iowa, Mississippi, Nebraska, Oklahoma and South Dakota.
The settlement is not yet final. It must go through the Tunney Act process — including public notice and a 60-day comment period — before U.S. District Judge Arun Subramanian determines whether it serves the public interest.
On Monday, U.S. District Judge Arun Subramanian entered the parties’ stipulation and order, allowing the DOJ settlement to proceed through the Tunney Act review process and putting key provisions into effect while that review is pending. The order does not constitute final approval; the court must still determine whether the proposed judgment is in the public interest after the required notice and comment period.
The settlement has become a flashpoint because the DOJ’s original case was centered on an effort to break up Live Nation and Ticketmaster. Instead, the proposal now before the court leaves the company intact and relies on conduct remedies, limited interoperability, contract changes, venue-specific provisions and monitoring.
There has also been widespread criticism of the way the deal was reached, with the settlement agreed to between senior Trump administration officials and Live Nation’s leadership, without the awareness of the DOJ’s trial attorneys. The deal, which came after a lengthy and well-documented flattery and influence campaign among well-connected Trump insiders, has been characterized as both incompete and corrupt by many in both live entertainment and political circles/
Consumer and competition advocates who reviewed the comprehensive deal as outlined in the filing said the details confirm their concern that the agreement does not meaningfully address the underlying structure of Live Nation’s market power.
“The behavioral remedy in the DOJ’s proposed judgment in the Live Nation-Ticketmaster monopolization case reveals the lengths that the Trump DOJ went to avoid breaking up the company,” Diana Moss, vice president and director of competition policy at the Progressive Policy Institute, told TicketNews. “The judgment extends the saga of failed past behavioral remedies with an even bigger, more complex, and harder to enforce set of gerry-rigged ‘access’ conditions.”
Moss said Live Nation and Ticketmaster would “keep their monopoly in ticketing,” leaving room to “find workarounds to the conditions so that it can continue to ice out competition.”
John Breyault, vice president at the National Consumers League, said the settlement fails to address what consumer advocates view as the core problem: the company’s vertical integration across ticketing, promotion, venue operations and artist relationships.
“The DOJ’s proposed settlement fails to address the root causes of Live Nation’s monopoly — the vertical integration that forecloses serious competition in nearly every facet of the live event ecosystem,” Breyault told TicketNews. “Weak provisions that purport to open Ticketmaster’s backend to third-party marketplaces and requiring divestiture of relatively minor amphitheater contracts will not create competition or break the anti-competitive ‘flywheel’ that DOJ rightfully flagged in its original complaint against the company.”
Live Nation has defended the agreement as a major reform package. When the framework was announced in March, the company said it had “consistently maintained that the DOJ’s allegations were without merit” and that the settlement would resolve remaining DOJ claims “without any admission of wrongdoing.”
CEO Michael Rapino said at the time that the settlement marked “a major step in improving the concert experience for artists and fans throughout the United States.” He added that Live Nation’s amphitheaters would be opened to all promoters, who could decide how to distribute up to 50% of tickets, while Ticketmaster service fees at those venues would be capped at 15%.
“By giving artists greater flexibility in choosing their promotional partners and ticketing strategy while also keeping the cost of a concert more affordable for fans, we are putting more power where it should be — with artists and fans,” Rapino said.
The proposed judgment makes clear, however, that Ticketmaster would remain embedded in the core infrastructure used by many major venues. The agreement would require Ticketmaster to build an “open distribution and ticket authentication system” allowing qualifying third-party primary ticketing providers to sell tickets allocated by venues that continue using its back-end system.
The distinction is central. The settlement does not separate Ticketmaster’s marketplace from its ticketing infrastructure or require venues to leave the platform. Instead, it allows competitors to operate within a system where Ticketmaster continues to control inventory management, barcodes, validation, entry and related data flows.
Under the proposal, Ticketmaster would have 275 days after entry of a final judgment to make the system fully operational and available as a standalone product.
Eligible providers would be able to use their own marketplace technology to list tickets, process payments, handle refunds, support customer accounts and render Ticketmaster-issued barcodes or tokens. Ticketmaster would also be prohibited from forcing consumers to pay additional fees or take materially burdensome steps — such as using a Ticketmaster account — when purchasing through a third-party primary provider.
However, Ticketmaster would still be allowed to charge third-party providers fees tied to use of its infrastructure, subject to oversight by a court-appointed monitor. In effect, the settlement opens access but does not remove Ticketmaster from the economics of the transaction.
“Even if the proposed opening of Ticketmaster’s backend took effect, competitors would still find themselves operating within an ecosystem controlled by their largest rival,” Breyault said. “As long as Live Nation’s vertical integration remains intact, the underlying incentives to stifle competition will persist.”
The filing also clarifies who qualifies to participate. To be deemed an “Eligible Primary Ticketing Services Provider,” companies that operate both primary and resale marketplaces must meet conditions including prohibiting speculative listings, complying with artist or content-owner resale restrictions, requiring seller identification and ensuring listings include verified ticket details.
The definition could prove significant for platforms such as StubHub and SeatGeek, which operate across primary and secondary markets. It also underscores a broader limitation: access to the system depends on complying with rules that preserve substantial control for artists, venues and content owners over resale activity.
If Ticketmaster disputes a provider’s eligibility, the issue would be decided by the monitor, with the DOJ able to seek a court ruling.
Moss said enforcing those conditions could prove especially difficult in a digital ticketing environment.
“In an almost fully digital, technology-driven ticketing market, the judgment’s interoperability conditions on Ticketmaster’s ‘back-end’ services will be virtually impossible to detect and enforce,” she said. “With no disrespect to monitors and antitrust compliance officers, non-compliance with the technical aspects of the remedy would require a SWAT team of full-time digital investigators.”
The treatment of venue contracts is narrower than a broad rollback of exclusivity. Existing agreements would lose automatic renewal provisions, and venues would be allowed to use another eligible ticketing provider for one event per year.
For contracts with at least four years remaining, venues could allocate up to 20% of ticket inventory to third-party providers, though Ticketmaster could adjust financial terms tied to exclusivity. Disputes would be resolved by the monitor.
Future contracts would be limited but not barred from exclusivity. Fully exclusive deals would be capped at four years, while partially exclusive agreements — leaving at least 20% of tickets open — could last longer under certain conditions. Contracts would not be allowed to include auto-renewals or penalize competitive bidding processes.
The structure gives venues more flexibility, but still allows Ticketmaster to maintain long-term relationships and remain the dominant platform.
“The judgment’s main feature is a complex web of conditions governing partially non-exclusive venue ticketing contracts,” Moss said. “This murky landscape will only serve to intimidate venues into taking the least risky path and signing up again with Live Nation-Ticketmaster.”
At Live Nation-owned, operated or controlled amphitheaters, the rules are more direct but still limited. Promoters and artists would be able to distribute up to 50% of tickets through third-party providers, while Ticketmaster service fees on its own sales would be capped at 15% of face value.
While that is a meaningful constraint, it does not apply broadly across Ticketmaster’s inventory and is limited to those amphitheaters.
The agreement also clarifies earlier descriptions of “divestiture.” Rather than requiring full asset sales, the remedy focuses on relinquishing booking, promotion or control-related rights at 13 specified venues, including sites in Alabama, Arkansas, Michigan, New York, Texas and Wisconsin.
Venue operators would be able to terminate or modify existing arrangements and conduct new ticketing RFPs. Live Nation would be barred from reasserting control or entering preferred booking agreements at those sites.
The settlement also addresses Oak View Group. Within 30 days of court approval, Live Nation and Ticketmaster would have to terminate a 2022 incentive agreement with OVG and disclose related financial arrangements to affected venues, which would then be allowed to rebid ticketing contracts without penalty.
Anti-retaliation provisions prohibit Live Nation and Ticketmaster from penalizing venues for working with competing ticketing providers or promoters, though carveouts allow for independent artist decisions and ordinary business conduct.
The proposal includes compliance measures such as monitoring, reporting requirements and financial penalties for violations, but it remains a conduct-based remedy layered onto years of prior restrictions following the companies’ 2010 merger.
Moss said those safeguards fall short without structural change.
“‘Firewalled’ employees with access to competitively sensitive data can easily be moved around the company to avoid restrictions,” she said.
The agreement would require advance notice of certain future acquisitions but does not broadly prohibit them, apart from limits tied to reacquiring divestiture-related assets.
“The judgment fails to prohibit any further acquisitions,” Moss said. “Instead, it imposes standard notification requirements, leaving the door open to rebuilding the monopoly.”
The financial component is narrower than early descriptions suggested. The filing outlines approximately $18.56 million in payments to the six settling states, separate from a previously announced $280 million fund tied to broader state claims.
Those broader claims remain unresolved. A coalition of non-settling states, led by New York Attorney General Letitia James, proceeded to trial and secured a jury verdict finding Live Nation and Ticketmaster liable under federal and state antitrust laws. They are now pursuing remedies that include breaking up the company.
The contrast is stark. The DOJ’s original lawsuit sought structural separation. The settlement instead relies on managed access to Ticketmaster’s systems, limits some exclusivity, modifies venue arrangements and imposes oversight — while leaving the company intact.
For competitors, the deal could open limited pathways into major venues. For artists and promoters, it could expand flexibility at Live Nation-controlled amphitheaters. For venues, it offers modest carveouts and opportunities to test alternatives.
But the central feature remains unchanged: Ticketmaster continues to serve as the infrastructure underlying much of the system. Access is conditional, alternatives are partial, and exclusivity persists.
Moss said the court should reject the proposal.
“In a Tunney Act review, the court could find that the proposed judgment fails the public interest test,” she said. “Only a breakup remedy clearly addresses the violation and restores competition.”
The court will now decide whether the settlement meets that standard. For fans, artists, venues and competitors, the broader question is whether a system that keeps Ticketmaster at its center can meaningfully restrain the power the government set out to challenge.
