A hole in the security of Mad Cool leaks the personal data of thousands of buyers | Madrid

The alarm sounded Tuesday on Twitter. “Someone is trying to get the wristbands out of Mad Cool and literally getting other people’s data? The data protection law is fine, isn’t it? complained a future festival attendee. “Incredible, leaking people’s data. You enter with your email and order and each time you load data a different person ”, criticized another, to which they replied “worse still, it is not necessary nor did they enter data”. “Right now he is having a huge problem with the gesture of the Mad Cool bracelets. Every time I refresh the page, the data of other buyers appears to me ”, said a third. “You have a bug [error en el código] that allows you to see entries that are not yours and the data of other people. None of these is me, and every time I hit ‘See data’ and ‘See entries’ I get someone different”, alerted another user.

It was indeed so. Starting at noon and for several hours, a technical error meant that the purchasers of the passes for the macro-event, to be held from July 6 to 8 in Madrid, accessed other people’s data when they entered the system enabled by the organization to ask to have your tickets sent to you. Not only did the exposed data of an unknown number of buyers remain, but the tickets could be downloaded and the addresses changed so that the bracelets did not end up in the hands of their owners, but of third parties. After several hours with this security hole open, Mad Cool closed access to the web for up to 24 hours later.

This Wednesday, the festival management has corrected the error and has indicated that the tickets that have been downloaded during the incident are not valid. In an information sent to those affected – whose number they have not determined – it is also ensured that no one has been able to access the personal code of the tickets. Mad Cool affirms that the platform already works “with total normality” and that all users can update what they need “with total security”.

For its part, the Ticketmaster ticket sales platform, which sent massive emails to give access to the system, maintains that the technical problem is unrelated to its company, which was only in charge of communicating the authorization of access to the ticketing system. bracelets for the festival “The ticket office works as an intermediary between promoters and fans, but Ticketmaster is not responsible for the computer error,” sources from this company indicate. Said sources add that “the problem has not affected in any case the ticket sales processes, the responsibility of Ticketmaster, which have functioned completely normally.”

The sixth edition of Mad Cool includes names like Liam Gallagher, Robbie Williams, Sam Smith, Mumford&Sons or The Prodigy, who will be accompanied by the American rock of Red Hot Chili Peppers and The Black Keys.

subscribe here a new daily bulletin about Madrid.