RSS   Newsletter   Contact   Advertise with us

Music streaming service Mixcloud reports 21m accounts hacked

Christian Fernsby ▼ | December 3, 2019
UK music streaming service Mixcloud has been hacked, with about 21 million customer records stolen.
Data hacking   Mixcloud
The hack is believed to have occurred in November and only came to light after a “dark web” seller provided a portion of the stolen data to some outlets.

Topics: Mixcloud accounts hacked

The data included usernames, email addresses, signup dates and login details, including IP addresses, profile photos and encrypted passwords. The database of stolen data is currently for sale on the dark web, a shady part of the internet reachable with special software, for 0.5 bitcoin, the equivalent of $3,664.

Mixcloud confirmed the hack in a blog post Saturday, saying that it believes the data involves only a minority of users. The company noted that the passwords were encrypted with “salted cryptographic hashes to ensure that they are extremely difficult to unscramble.” As a precaution, Mixcloud advised affected users to change their passwords.

How the hack took place remains unknown. As a U.K.-based company, Mixcloud is required to comply with the European Union’s General Data Protection Regulation, so an investigation will be forthcoming. Even if the U.K. leaves the EU either later this year or early next year, the regulation is still applicable because the company has customers in Europe and hence GDPR compliance is still required.