MLB Ballpark App Lawsuit Claims Data Breaches Caused Fans’ Tickets to Disappear

New to ClassAction.org? Read our Newswire Disclaimer

A proposed class action lawsuit alleges the MLB Ballpark App has suffered from “systemic cybersecurity breaches” that have caused buyers’ tickets to disappear or be stolen—and their personal information to potentially be exposed. 

Want to stay in the loop on class action lawsuits that matter to you? Sign up for ClassAction.org’s free weekly newsletter. 

The 37-page class action lawsuit against Major League Baseball subsidiary MLB Advanced Media, L.P. claims the data breaches began in August and September of this year, with consumers reporting that tickets stored in the MLB Ballpark App, touted by Major League Baseball as the most secure way for fans to buy game tickets online, had been stolen. The case charges that MLB Advanced Media has failed to acknowledge the existence of any form of breach of MLB Ballpark App accounts, leaving consumers “in the lurch” and unable to protect their tickets and any personal information that may have been compromised.

The suit accuses MLB Advanced Media of “dragging its feet” in dealing with the apparent MLB Ballpark App data breaches, in the process allowing “cybercriminals to get a running start” on harming consumers. 

“While MLB could have given Plaintiff and Class members the ability to start taking action to protect themselves, MLB has made and continues to make a conscious decision not to,” the lawsuit alleges. 

The case says some fans have received emails from MLB and/or ballclubs in early September concerning “unusual activity” in their accounts. Per the suit, the emails urged users to change their passwords and warned them that “[a]ttackers often test common passwords or stolen passwords” obtained through data breaches. These communications from MLB and/or the league’s teams, the filing says, offer neither accountability nor explanation as to the alleged MLB Ballpark App data breaches “other than to shift blame for inadequate cybersecurity measures back to baseball fans themselves.” 

“Currently, the MLB Ballpark App, as compared to industry standards, is woefully insufficient in terms of data security protocols to protect baseball fans from anticipated attacks,” the case charges, noting that the app lacks two-factor authentication, mandatory delays for ticket transfers, and the option to print tickets. 

The class action contends that a second email from MLB’s ball clubs is “just as problematic” as the first, as it acknowledges that some account holders have reported “unauthorized transactions” and asks fans to monitor their accounts while offering little by way of actionable solutions. 

“The key concern with this email is two-fold: (1) it evidences MLB’s awareness of breaches of MLB Ballpark App user accounts (while offering a lone solution which is entirely placed in the hands of consumers) and (2) that MLB’s MLB Ballpark App has zero ability to detect the presence of unauthorized transfers of baseball tickets (and asks baseball fans themselves to confirm there has not been a theft of their tickets).” 

The case calls the league’s response to the apparent MLB Ballpark App problems “unacceptable” given that Major League Baseball has not publicly disclosed the prevalence of cybersecurity incidents affecting purchased tickets or addressed that users are effectively in the dark about whether any of their personal information has been exposed to unauthorized parties. 

“To date, MLB continues to fail to act,” the class action lawsuit scathes. “And, each day that MLB continues to do so, more baseball fans are falling victim to MLB’s failures to secure their tickets.” 

The MLB Ballpark app lawsuit looks to cover all individuals and entities residing in the United States who had tickets during the 2025 MLB season on their MLB Ballpark App that were subject to unauthorized transfer or theft due to the alleged data breach(es). The proposed class includes all consumers who were sent a notice from MLB about unauthorized or suspicious activity on their MLB Ballpark App accounts due to the cybersecurity lapses. 

Did you know that some class action settlements require no proof to submit a claim? Check out the latest class action settlements.