{"schema_version":"0.10.0","id":"LR-2026-0594","record_version":1,"title":"Claude helped hacker issue tickets to almost every US music festival","verification":{"human_verified":false,"method":"automated_gate","auto_verified":true,"score":60.9,"score_breakdown":{"source_authority":12.1,"independent_corroboration":15.0,"implicated_party_confirmed":0.0,"citation_integrity":14.0,"specificity":6.0,"completeness":5.76,"unhedged_language":5.0},"checks":{"schema_valid":true,"every_field_cited":true,"quotes_verbatim":true,"source_fetched":true,"distinct_incident":true,"dates_plausible":true,"sources_agree":true,"source_describes_incident":true,"severe_backed_by_source":true,"record_integrity":true,"eligible":true,"about_this_case":true},"gate_version":"gate-2026-10-18.7","cross_check_model":null,"cross_check_agreement":null,"duplicate_of":null,"verified_by":null,"verified_at":"2026-11-01","extraction_run_id":null,"evidence_level":{"level":"confirmed","reason":"2 independent outlets","original_document":null,"reports_total":2,"reports_independent":2,"reports_derivative":0,"developing":false,"disputed":false,"rules_version":"evidence-2026-10-29.1","computed_at":"2026-11-01","history":[{"date":"2026-11-01","from_level":null,"to_level":"confirmed","reason":"2 independent outlets"}]},"sources_hash":"954f7a5a4a0e41eb3bc08215d579809b7ae6967180153f4adbc06190de803432"},"system":{"model_name":"Claude Opus 4.7","model_version":null,"developer":"Anthropic","harness":"Claude Code","tools_granted":[],"permissions_scope":null,"autonomy_level":"unknown","guardrails_present":[],"deployment_context":"unknown","tier":null,"lifecycle_stage":null,"integration_type":null,"intended_use":null,"safeguard_state":null,"production_intended":null},"event":{"date_occurred":null,"date_disclosed":"2026-07-01","incident_class":"security_compromise","failure_class":null,"agent_involved":null,"secondary_failure_classes":[],"trigger":"unknown","duration":null,"detection_method":"public_researcher","summary":"A security researcher, Ian Carroll, used Anthropic's Claude Opus 4.7 in April while testing the website of Front Gate Tickets, a Live Nation subsidiary that handles ticketing for many major US music festivals. The site had a SQL injection flaw behind a web application firewall. Claude devised a nested SQL query that evaded the firewall's detection. Carroll then used data from the site to take over an administrator account, which gave him the ability to issue tickets, though he did not complete any orders. He stopped short of exfiltrating bulk data and reported the findings to Front Gate. The company said the issue was resolved within 24 hours and that it found no evidence of exploitation. Carroll disputed some of the company's claims about its safeguards.","tags":[],"date_detected":null,"near_miss":true,"root_cause":"guardrail","root_cause_detail":null,"failure_class_detail":null,"responsible_party":null,"adversarial_actor":null,"input_provenance":null,"time_to_contain":null,"operations_paused":null,"remediation":"Front Gate says it has now patched the vulnerability.","precursor_events":null,"primary_risk":"RK03","control_chain":[{"layer":"L4","party":"target","party_name":"Front Gate Tickets","control_id":"J2","outcome":"missing","reason":null,"quote":"Carroll was surprised to see just how easy his takeover method was: No two-factor authentication prevented a leaked, stolen, or guessed password from giving someone full access.","source_index":0,"reviewed":false}]},"impact":{"direct_loss_usd":null,"remediation_hours":null,"records_exposed":null,"third_parties_affected_count":null,"severity":"moderate","harm_class":["none_materialised"],"affected_description":null,"protected_class_involved":null,"data_categories_exposed":["names","emails","mailing addresses"],"loss_range_usd":null,"reversibility":null,"downstream_exposure_count":null},"evidence":{"sources":[{"url":"https://www.wired.com/story/claude-helped-a-hacker-find-a-way-to-issue-tickets-to-almost-every-us-music-festival/","publisher":"WIRED","date":"2026-07-01","type":"press","title":"Claude Helped a Hacker Find a Way to Issue Tickets to Almost Every US Music Festival - WIRED","archived_url":null,"attachment":"first_report","independence":"independent"},{"url":"https://cybersecuritynews.com/claude-ai-score-free-tickets-music/","publisher":"CyberSecurityNews","date":"2026-07-03","type":"press","title":"Hacker Used Claude AI to Score Free Tickets to Nearly Every US Music Show - CyberSecurityNews","archived_url":null,"independence":"independent"}],"per_field_confidence":{"system.model_name":"C","system.developer":"C","system.harness":"C","event.incident_class":"C","event.detection_method":"C","event.root_cause":"C","event.remediation":"C","event.near_miss":"C","impact.harm_class":"C","impact.data_categories_exposed":"C","context.country":"C","context.industry":"C","impact.severity":"D","event.primary_risk":"D","event.control_chain":"C","event.summary":"C","system.autonomy_level":"D","system.deployment_context":"D","event.trigger":"D","event.date_disclosed":"D","context.denominator_available":"D"},"field_citations":{"system.model_name":[{"source_index":0,"quote":"That was the discovery of security researcher Ian Carroll, who used the AI tool Claude Opus 4.7 in April to discover a technique that allowed him full access to the systems of Front Gate Tickets, which handles ticketing for practically every major US music festival, from Lollapalooza and South by Southwest to Austin City Limits."}],"system.developer":[{"source_index":0,"quote":"Carroll—who is part of Anthropic’s Cyber Verification Program, which allows approved security researchers to use its tools for certain hacking functions—says he was taken aback by how easily Claude came up with key elements of his technique for breaking into the Front Gate site."}],"system.harness":[{"source_index":1,"quote":"The researcher then handed the problem to Claude Code running the Opus model, which discovered that the WAF only inspected the outer layer of input, meaning injection payloads nested inside a derived subquery slipped through undetected."}],"event.incident_class":[{"source_index":0,"quote":"Carroll found that Front Gate, which like Ticketmaster is a subsidiary of the event company Live Nation Entertainment, had a bug in its website that he—with Claude’s help—could exploit to gain access to millions of customer or staff records and freely issue tickets for any event, of any value, to himself or whoever he chose."}],"event.detection_method":[{"source_index":0,"quote":"Carroll did not, in fact, take advantage of his ticket-issuing superpower, and instead reported his findings to Front Gate, which says it has now patched the vulnerability."}],"event.root_cause":[{"source_index":1,"quote":"The researcher then handed the problem to Claude Code running the Opus model, which discovered that the WAF only inspected the outer layer of input, meaning injection payloads nested inside a derived subquery slipped through undetected."}],"event.remediation":[{"source_index":0,"quote":"Carroll did not, in fact, take advantage of his ticket-issuing superpower, and instead reported his findings to Front Gate, which says it has now patched the vulnerability."}],"event.near_miss":[{"source_index":0,"quote":"Carroll did not, in fact, take advantage of his ticket-issuing superpower, and instead reported his findings to Front Gate, which says it has now patched the vulnerability."}],"impact.harm_class":[{"source_index":0,"quote":"This was resolved within 24 hours, and we can confirm there is no evidence of exploitation, ticket impact, or compromise of customer information,"}],"impact.data_categories_exposed":[{"source_index":0,"quote":"Carroll believes that the vulnerability he and Claude found would have provided access to the information of millions of customers, including names, emails, and mailing addresses—but not credit card details—as well as that of Front Gate’s staff."}],"context.country":[{"source_index":0,"quote":"That was the discovery of security researcher Ian Carroll, who used the AI tool Claude Opus 4.7 in April to discover a technique that allowed him full access to the systems of Front Gate Tickets, which handles ticketing for practically every major US music festival, from Lollapalooza and South by Southwest to Austin City Limits."}],"context.industry":[{"source_index":0,"quote":"That was the discovery of security researcher Ian Carroll, who used the AI tool Claude Opus 4.7 in April to discover a technique that allowed him full access to the systems of Front Gate Tickets, which handles ticketing for practically every major US music festival, from Lollapalooza and South by Southwest to Austin City Limits."}],"impact.severity":[{"source_index":0,"quote":"Carroll believes that the vulnerability he and Claude found would have provided access to the information of millions of customers, including names, emails, and mailing addresses—but not credit card details—as well as that of Front Gate’s staff."}],"event.control_chain":[{"source_index":0,"quote":"Carroll was surprised to see just how easy his takeover method was: No two-factor authentication prevented a leaked, stolen, or guessed password from giving someone full access."}],"event.summary":[{"source_index":0,"quote":"Claude had, in fact, found that a “nested SQL query”—a SQL query inside of another SQL query—could evade the firewall’s detection."},{"source_index":1,"quote":"The researcher then handed the problem to Claude Code running the Opus model, which discovered that the WAF only inspected the outer layer of input, meaning injection payloads nested inside a derived subquery slipped through undetected."},{"source_index":1,"quote":"The researcher stopped short of exfiltrating bulk data, stating the point was proven once EDC- and Bonnaroo-level administrative control was achieved from a single unauthenticated GET request."},{"source_index":0,"quote":"Carroll did not, in fact, take advantage of his ticket-issuing superpower, and instead reported his findings to Front Gate, which says it has now patched the vulnerability."},{"source_index":0,"quote":"This was resolved within 24 hours, and we can confirm there is no evidence of exploitation, ticket impact, or compromise of customer information,"},{"source_index":0,"quote":"Carroll counters that those claims are uncertain at best."}]},"notes_on_gaps":"The sources do not state the exact day of discovery; the year 2026 is taken from the article date. No date_disclosed is recorded because no source states when the issue was made public beyond article metadata. Whether the Claude tool acted autonomously is not stated, so agent_involved, failure_class and adversarial_actor are left out. Trigger is left out because no cause is stated. Front Gate responsible_party as deployer is a judgement from its role as site operator. Root cause as guardrail is a judgement: the WAF failed to catch nested injection, while the underlying SQL injection flaw is described separately. Company claims about alerts, audit trails, RFID wristbands and limited personal data exposure are disputed or unverified and are not recorded as held controls; Anthropic's statement about detection under the program was hypothetical and is not recorded. No WAF control exists in the closed list, so it is not linked. Millions of records is a researcher's estimate and no count is recorded. Severity moderate is a judgement from the stated data of others reachable with a stated scope; harm_class none_materialised reflects the company's statement of no evidence of exploitation, which Carroll disputes in part. [case created by the backfill: read by claude-haiku-5-5, backfill-2026-11-01.2, 2026-11-01; not yet reviewed] [2026-11-01: evidence level set: Confirmed (2 independent outlets)]"},"context":{"industry":"live events ticketing","org_size_band":null,"country":"US","denominator_available":false,"denominator":null,"related_incident_ids":[],"systemic_exposure":null,"shared_model_id":null,"upstream_incident_id":null,"incident_evidence":null,"regulatory":null,"coverage":null},"narrative":{"steps":[{"step":"went_wrong","text":"The web application firewall inspected only the outer layer of input, so a nested injection payload passed through it undetected.","quote":"The researcher then handed the problem to Claude Code running the Opus model, which discovered that the WAF only inspected the outer layer of input, meaning injection payloads nested inside a derived subquery slipped through undetected.","source_index":1,"grade":"C"},{"step":"done","text":"The researcher did not issue any tickets and reported the flaw, and the company says it has patched it.","quote":"Carroll did not, in fact, take advantage of his ticket-issuing superpower, and instead reported his findings to Front Gate, which says it has now patched the vulnerability.","source_index":0,"grade":"C"}],"model":"claude-haiku-5-5","prompt_version":"backfill-2026-11-01.2","extracted_at":"2026-11-01","source_urls":["https://www.wired.com/story/claude-helped-a-hacker-find-a-way-to-issue-tickets-to-almost-every-us-music-festival/","https://cybersecuritynews.com/claude-ai-score-free-tickets-music/"]},"analysis":{"sections":{"timeline":[{"text":"Front Gate confirmed the findings after the researcher shared a draft blog post with the company, before WIRED contacted it.","quote":"What’s more, Front Gate confirmed Carroll’s findings after he shared a draft of a blog post about his discovery with the company, prior to WIRED reaching out to Front Gate.","source_index":0,"when":null},{"text":"The company states the issue was resolved within 24 hours.","quote":"This was resolved within 24 hours, and we can confirm there is no evidence of exploitation, ticket impact, or compromise of customer information,","source_index":0,"when":null}]},"model":"claude-haiku-5-5","prompt_version":"backfill-2026-11-01.2","extracted_at":"2026-11-01","source_urls":["https://www.wired.com/story/claude-helped-a-hacker-find-a-way-to-issue-tickets-to-almost-every-us-music-festival/","https://cybersecuritynews.com/claude-ai-score-free-tickets-music/"]}}