Over 1,000 customer accounts were compromised and used to purchase more than 3,500 e-tickets, which were then resold.