Breach Disclosure: Sonicbids

Back in May of 2020, the online social music platform Sonicbids disclosed a breach that impacted around 752,000 users. This breach was stated to have occurred on December 29, 2019 through their investigation into this incident.

Recommendations

Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks
If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account.

Details

On May 17, 2020, Sonicbids learned that some user accounts were publicly accesible as a result of a data privacy event involving a third-party cloud hosting service. The breached data included names, usernames, email addresses, and PBKDF2 password hashes for users of the platform.

The hacking group, ShinyHunters, posted this database for sale on the popular hacking forum, RaidForums back in May 15, 2020 with a date matching when Sonicbids claimed to have been compromised.

Figure 1: Database listing on RaidForums advertisting the breach data