Live Nation Data Breach Class Action Lawsuit, Ramos v. Live Nation Entertainment Alleges Negligence Over Exposed Social Security Numbers, IDs and Health Records

A proposed class action accuses Live Nation Entertainment Inc. of failing to take reasonable steps to protect personal information involved in a reported data breach. Plaintiff Isiah Ramos filed Ramos v. Live Nation Entertainment Inc., Case No. 2:26-cv-11678, on October 7, 2026, in the U.S. District Court for the Central District of California. He alleges negligence and other claims and says Live Nation also waited more than four months to notify people. He seeks to represent people across the United States whose private information was compromised.

A separate disclosure logged by the Vermont Attorney General on October 1, 2026, lists Social Security numbers, government ID numbers and health records among the data involved. These are allegations, not findings that Live Nation violated the law.

No settlement or court-approved claim form exists. There is no claim to file and no deadline yet.

Important notice: AllAboutLawyer.com is an independent consumer legal information website, not a law firm. We do not provide legal advice.

Quick Facts: Live Nation Data Breach Lawsuit

Detail	Information
Company sued	Live Nation Entertainment, Inc.
Lead case	Ramos v. Live Nation Entertainment Inc.
Case number	2:26-cv-11678
Court	U.S. District Court, Central District of California
Filed	October 7, 2026
Plaintiff	Isiah Ramos, on behalf of himself and others similarly situated
Plaintiff’s counsel	John J. Nelson of Milberg PLLC
Type of case	Putative class action; no class certified
Reported data categories	Social Security numbers, government ID numbers, health records
Breach reported to Vermont Attorney General	October 1, 2026 (two Vermont residents listed; not a nationwide total)
Claims	Negligence, negligence per se, breach of implied contract, unjust enrichment
Amount in controversy alleged	Reportedly over $5 million (a federal jurisdictional allegation, not a settlement amount)
Related lawsuits	Fraga (2:26-cv-11655) and Gosman (2:26-cv-11664)
Settlement or claim form	None identified
Status	Complaint stage

What Is the Ramos v. Live Nation Class Action About?

Ramos alleges Live Nation failed to use reasonable safeguards for sensitive information on its systems. According to the complaint, Live Nation, a global live entertainment promoter and venue management company, suffered a cyberattack, and people who gave the company their private information in connection with its services had it exposed. The complaint says Ramos is not a Live Nation employee and gave his information while obtaining services. It also alleges the information was exposed on the dark web and that victims face a lifelong risk of misuse. That is a plaintiff’s allegation, not an established fact.

What Information Was Reported?

The Vermont Attorney General’s security-breach notice log lists Live Nation Entertainment Inc. on October 1, 2026, with three categories of potentially affected information: Social Security numbers, government identification numbers and health records. The Vermont entry counts two Vermont residents. It does not give a nationwide total or the technical cause.

The entry does not show that every category was exposed for every person, or whether Ramos’s own data was affected. Press coverage of the filings also reports that health records were involved. Not every Ticketmaster customer or concert-goer was necessarily affected.

What Does the Lawsuit Accuse Live Nation Of?

• Inadequate data protection: Live Nation allegedly failed to adequately protect the sensitive data it collected and stored.
• Delayed notice: The complaint alleges the company waited more than four months to tell affected people. None of the complaints states when the breach happened or when Live Nation discovered it, and that date matters because the “four months” figure runs from alleged discovery.
• Concealment: The complaint alleges the company concealed the existence and extent of the breach.

These must still be proven. Live Nation has said it takes the security of its systems and the information entrusted to it seriously and has not publicly addressed the specific allegations in detail.

What Legal Claims Are Brought?

Negligence and Negligence Per Se

Negligence generally requires a duty, breach, causation and damages. Negligence per se can apply when a defendant allegedly violates a statute meant to protect people like the plaintiff. In data breach cases, plaintiffs commonly point to Section 5 of the FTC Act (15 U.S.C. § 45), which the FTC has used against unreasonable data security, and to California’s reasonable-security statute (Cal. Civ. Code § 1798.81.5). Whether that theory works here depends on the law and the court’s rulings.

Breach of Implied Contract

This theory argues that giving personal information as part of a business relationship carried an implied promise to protect it with reasonable care.

Unjust Enrichment

This claim argues Live Nation should not keep a benefit obtained under circumstances the law treats as unjust. The elements vary by jurisdiction.

Related article: Adams Toyota $4.25M ResistAll/EnviroGuard Class Action Settlement, Who Qualifies and How to Claim

Laws That May Be Relevant (Background Only)

None of the following is confirmed as pleaded in the complaint, and the complaint PDF was not directly reviewed.

Law	General description
California Consumer Privacy Act, Cal. Civ. Code § 1798.150	Gives California residents a private right of action, including statutory damages of $100 to $750 per consumer per incident, for certain data breaches caused by failure to maintain reasonable security, after a notice-and-cure process in some cases.
California Customer Records Act, Cal. Civ. Code §§ 1798.81.5 and 1798.82	Requires reasonable security and notice of a breach in the most expedient time possible and without unreasonable delay. A 2025 amendment, effective January 1, 2026, added specific deadlines for notice to residents and the Attorney General; verify the current text.
California Confidentiality of Medical Information Act, Cal. Civ. Code § 56 et seq.	Protects medical information held by certain entities and provides remedies, including nominal damages, for some violations. Whether it applies depends on whether Live Nation is a covered entity.
California Unfair Competition Law, Cal. Bus. & Prof. Code § 17200	Commonly pleaded in breach suits against unlawful, unfair or fraudulent practices.
Vermont data breach law, 9 V.S.A. § 2435	Requires notice to the Vermont Attorney General within 14 business days of discovery and consumer notice within 45 days, with limited exceptions. Other states have their own deadlines.
HIPAA	Has no private right of action, and it applies only to covered entities and business associates, which has not been established here.
SEC cybersecurity disclosure rules (Form 8-K, Item 1.05)	Public companies must disclose material cybersecurity incidents within four business days of determining materiality. Live Nation is publicly traded; whether any such filing was made was not verified.

Federal Court Issues the Case May Raise

• CAFA jurisdiction: Federal courts can hear certain class actions under 28 U.S.C. § 1332(d) when the amount in controversy exceeds $5 million, there are at least 100 class members and minimal diversity exists. That is why the complaint reportedly cites more than $5 million.
• Standing: A plaintiff must show concrete injury (TransUnion LLC v. Ramirez, 594 U.S. 413 (2021); Spokeo, Inc. v. Robins, 578 U.S. 330 (2016)). In the Ninth Circuit, courts have recognized standing based on a credible risk of identity theft after a breach in some cases (Krottner v. Starbucks Corp., 628 F.3d 1139 (9th Cir. 2010); In re Zappos.com, Inc., 888 F.3d 1020 (9th Cir. 2018)). Whether Ramos has standing for each claim will likely be contested.
• Class certification: Rule 23 of the Federal Rules of Civil Procedure requires numerosity, commonality, typicality and adequacy, plus other conditions. No class has been certified.
• Consolidation: Related cases in the same court may be consolidated under Rule 42, or in different courts through multidistrict litigation (28 U.S.C. § 1407). No consolidation order was identified.
• Arbitration and terms of service: Some company terms of service contain arbitration clauses and class waivers. Whether any apply to a particular plaintiff or claim would be a contested question, and nothing here confirms they do.

Who Is in the Proposed Class?

The proposed class, as described in the Ramos complaint, covers people in the United States whose private information was compromised in the breach. A judge has not approved any class definition, and the final group, if one is ever certified, could differ. If you received a breach notice from Live Nation, you are likely within the group these lawsuits aim to represent, but receiving a notice does not by itself make you a class member or entitle you to payment.

What Do the Plaintiffs Want?

• Damages, including punitive damages where legally available
• Lifetime credit monitoring for class members
• A court order requiring Live Nation to improve its data security practices

The complaint lists harms including invasion of privacy, time lost dealing with the fallout, loss of the benefit of the bargain, expenses and the continuing risk of misuse. The reported $5 million figure is a jurisdictional allegation, not a promised recovery.

Other Live Nation Data Breach Lawsuits

Case	Filed	Case number
Fraga v. Live Nation Entertainment Inc.	October 6, 2026	2:26-cv-11655
Gosman v. Live Nation Entertainment Inc.	October 7, 2026	2:26-cv-11664
Ramos v. Live Nation Entertainment Inc.	October 7, 2026	2:26-cv-11678

All were filed in the Central District of California. Fraga and Gosman reportedly involve information provided in connection with employment, while Ramos involves information provided to obtain services. Press coverage says each brings negligence, negligence per se, breach of implied contract and unjust enrichment claims and seeks to represent a nationwide class. Multiple suits do not establish liability, and no consolidation order was identified.

Background: Earlier Ticketmaster Breaches

Live Nation’s subsidiary Ticketmaster was reportedly hit by data breaches in 2018 and 2024. The 2024 incident led to a proposed class action in California federal court accusing Ticketmaster and Live Nation of negligence. The complaints do not say whether the current breach is connected to either earlier incident.

What To Do If You Received a Live Nation Breach Notice

You do not need to join a lawsuit to protect yourself.

1. Read the notice carefully. Note what information it says was exposed and whether free credit monitoring is offered.
2. Freeze your credit. A freeze at Equifax, Experian and TransUnion is free and makes it harder for someone to open new accounts in your name.
3. Consider a fraud alert if you prefer a lighter step.
4. Check your credit reports at AnnualCreditReport.com and review bank and card statements.
5. Watch for phishing. Scammers may use stolen details or a fake breach notice to request passwords, payment details or identity documents.
6. Report identity theft at IdentityTheft.gov if you find misuse.
7. Keep your notice and related emails. They may help show you are a class member if a settlement is reached.

These are general precautions and do not establish that you were affected. Beware of sites claiming a Live Nation settlement is already paying people or asking for sensitive information to submit a claim.

Is There a Settlement or Claim Form?

No settlement or court-approved claim form was identified as of October 16, 2026. The case is at the complaint stage. A filing does not mean the court has approved a settlement, certified a class or opened a compensation program. Any real settlement would be supported by an official court filing and an authorized settlement administrator.

For another example of how an alleged data breach can lead to proposed class litigation, see Nike Data Breach Class Action Lawsuit 2026: What You Need To Know.

What Happens Next?

Live Nation may respond to the complaint, move to dismiss or compel arbitration, or challenge Ramos’s ability to represent a nationwide class. The related cases may be consolidated. Unresolved questions include the scope of the breach, the nationwide number affected, whether Ramos’s own information was compromised, when the breach and discovery occurred and whether any legal duty was breached. No class-certification ruling or settlement was identified.

Key Dates

Date	Event
Not disclosed	Date of the breach and when Live Nation learned of it
October 1, 2026	Breach logged with the Vermont Attorney General
October 6, 2026	Fraga v. Live Nation filed
October 7, 2026	Gosman and Ramos filed
TBD	Live Nation’s response to the complaint
TBD	Any motion to consolidate

Frequently Asked Questions

Is there a Live Nation data breach settlement I can claim?

No. No settlement or claim form was identified.

What is the case number for Ramos v. Live Nation?

2:26-cv-11678, in the U.S. District Court for the Central District of California.

Who is the plaintiff’s attorney?

John J. Nelson of Milberg PLLC.

What information was exposed?

The Vermont Attorney General’s October 1 entry lists Social Security numbers, government ID numbers and health records. Press coverage also reports health records.

Are all Ticketmaster customers affected?

No. Buying a ticket or using Ticketmaster does not, by itself, show your information was affected.

Is this a certified class action?

No. It is a putative class action. A judge has not certified a class.

Do I need to do anything to be part of the class action?

Not at this stage. If a class is certified or a settlement is reached, notice would come through a court-approved process.

Has Live Nation been found negligent?

No. The claims are allegations.

Can I sue Live Nation on my own?

Ask a licensed attorney. Terms you agreed to, such as arbitration clauses, and a class action can affect your options and rights.

Sources and Court Records

1. U.S. District Court, Central District of California, Ramos v. Live Nation Entertainment Inc., No. 2:26-cv-11678 (docket). https://dockets.justia.com/docket/california/cacdce/2%3A2026cv11678/1042285
2. Complaint, Ramos v. Live Nation Entertainment Inc., as published by Music Business Worldwide.
3. Music Business Worldwide, “Live Nation hit with class action lawsuits over data breach involving Social Security numbers and health records.”
4. Vermont Attorney General, Security Breach Notices. https://ago.vermont.gov/categories/security-breach-notices
5. Federal Trade Commission, What To Do After a Data Breach. https://consumer.ftc.gov/media/79862
6. Federal Trade Commission, credit freeze information. https://consumer.ftc.gov/consumer-alerts/2025/01/freezing-maybe-freeze-your-credit-too
7. IdentityTheft.gov. https://www.identitytheft.gov/
8. PACER. https://pacer.uscourts.gov/
9. Statutes and rules: 15 U.S.C. § 45; 28 U.S.C. §§ 1332(d) and 1407; Fed. R. Civ. P. 23 and 42; Cal. Civ. Code §§ 56 et seq., 1798.81.5, 1798.82 and 1798.150; Cal. Bus. & Prof. Code § 17200; 9 V.S.A. § 2435; SEC Form 8-K Item 1.05.
10. Cases: TransUnion LLC v. Ramirez, 594 U.S. 413 (2021); Spokeo, Inc. v. Robins, 578 U.S. 330 (2016); Krottner v. Starbucks Corp., 628 F.3d 1139 (9th Cir. 2010); In re Zappos.com, Inc., 888 F.3d 1020 (9th Cir. 2018).

Disclaimer: AllAboutLawyer.com provides general information about a pending lawsuit and is not legal advice. Allegations in a complaint have not been proven. The author is a legal content researcher, not a practicing attorney. Consult a licensed attorney about your situation.