A shared ticketing and patron management CRM system utilized by multiple flagship Western Australian arts institutions—including the Perth Festival and Black Swan State Theatre Company—was breached, leaking patron patron histories.