A lawsuit is seeking damages from Ticketmaster after it was revealed in a federal filing that Ticketmaster was the victim of a cyberattack that may have breached the data of millions of users.

Ticketmaster’s parent company, Live Nation, confirmed the hack in a filing with the U.S. Securities and Exchange Commission. On May 20, “unauthorized activity was discovered within a third-party cloud database environment containing corporate data.”

The lawsuit was filed in the U.S. District Court for the Central District of California.

RELATED NEWS | Be careful with concert tickets: the $45 tickets for women end up costing over $125 each

The lawsuit claims that data breaches were “preventable” and that Ticketmaster’s parent company Live Nation failed to take adequate preventive measures.

Live Nation said it then launched an investigation to find out what happened. On May 27, a “criminal threat actor” offered to sell the data he allegedly stole from Ticketmaster on the dark web, the federal filing said.

“Defendant’s security practices were ineffective because Defendant failed to ensure that its third-party providers were responsible for their implementation,” the lawsuit states.

RELATED STORY | Woman loses nearly $10,000 in savings to bank fraud

The lawsuit alleges that those whose data was stolen suffered a range of violations, “including, but not limited to: invasion of privacy, theft of their private information, lost or diminished value of private information, lost time and opportunity costs, associated with an attempt to mitigate the actual consequences of the data breach; lost opportunity costs associated with attempting to mitigate the actual consequences of the data breach; damage; and the ongoing and increased risk that their private information will be misused.”

Scripps News has contacted Ticketmaster for its response to the lawsuit.