Online box office liable for data theft and consequential damages