Data breach exposes 29.8M SoundCloud accounts

BleepingComputer reports that audio streaming platform SoundCloud had 29.8 million accounts, or almost a fifth of all its users, affected by a December cyberattack, which was admitted by the ShinyHunters hacking operation.

Account information exposed by the breach included names, email addresses, usernames, avatars, follower and following counts, as well as select users' countries, according to Have I Been Pwned, which added the affected emails to its platform.

"The attackers later attempted to extort SoundCloud before publicly releasing the data the following month," said the data breach notification service. While SoundCloud previously confirmed data extortion threats made to its users, employees, and partners, it has yet to provide additional details regarding the incident.

Such a development comes amid an ongoing ShinyHunters voice phishing attack campaign aimed at Okta, Microsoft, and Google single sign-on accounts for subsequent corporate software-as-a-service platform compromise and data extortion activities.