Ticketmaster had the same problem. Monzo did an interesting write up from their end: https://monzo.com/blog/2018/06/28/ticketmaster-breach/