SoundCloud Suffers Cyberattack, Data Breach Confirmed

Music streaming platform SoundCloud has publicly disclosed a security incident involving unauthorized access to its systems. The breach, initially detected in an ancillary service dashboard, was followed by denial-of-service attacks that temporarily disrupted the web version of the service. Threat actors reportedly accessed limited data, specifically email addresses and information already visible on public profiles.

This incident affected an estimated 20% of SoundCloud's extensive user base, which numbers over 140 million. While the platform insists that sensitive data was not compromised, the exposure of email addresses raises concerns about potential phishing attempts. SoundCloud has acknowledged that some configuration changes made during security enhancements have caused temporary connectivity issues for users utilizing VPNs.

In response to the breach, SoundCloud has stated it has bolstered its monitoring and threat detection capabilities, reinforced identity and access controls, and conducted system audits. Users are advised to be vigilant regarding communications sent to their registered email addresses and to take precautions against potential phishing schemes. The platform is actively working to resolve the VPN-related access disruptions.