Plaintiffs claim the breach was “a direct result of [Ticketmaster’s] failure to implement adequate and reasonable data protection procedures.”