Cybercriminals copy personal data from SoundCloud and Pornhub users

Attackers have infiltrated systems at SoundCloud. Additionally, an attack affects a service provider for Pornhub and some users of the service. In both cases, cybercriminals had access to personal user data.

SoundCloud: 20 percent of users affected

In a statement, SoundCloud assures that the security issue has since been resolved and there is no longer any danger. Those responsible explain that unknown attackers gained access to internal systems of the online music service through a hitherto unspecified method.

This led to DoS attacks, making the web service temporarily unavailable. After completing investigations, the provider states that attackers were able to access personal data of around 20 percent of users. According to SoundCloud, this includes email addresses, among other things. However, credit card data and passwords were not affected.

Those responsible emphasize that they have hardened their systems more effectively to be better equipped against attacks. This resulted in temporary connection problems for VPN users.

Service Provider as an Entry Point

Pornhub states in a statement that the cyberattack does not affect its systems but rather the data analysis service Mixpanel. Through a smishing attack, attackers were able to infiltrate Mixpanel and copy data from partners like OpenAI.

Pornhub explains that “some premium users” are affected by the incident. There is currently no specific number. It is also not clear from the statement which data is affected. However, payment and access data are reportedly not included. Pornhub states that it has not worked with the data analysis service since 2021. Investigations are currently ongoing.

(des)