“Why did the US specifically mention to avoid concerts?”
This sort of warning has usually come from signal intelligence. Often the bad guys opsec is leaky.
Translation: I have no idea what actually happened/happens, so I'll just make up some apologetic bullshit.