A hacker breached live streaming music service Mixcloud earlier this month and is now selling user data on the dark web.
The hack came to light on Friday, when the hacker contacted several journalists to share news about the breach and provide data samples.
According to a sample of the stolen data, the hacker is selling Mixcloud user information that includes details such as usernames, email addresses, hashed passwords, users' country of origin, registration dates, last login dates, and IP addresses.
The breach appears to have occurred on or before November 13, which is the registration date of the last user profile included in the data.
Mixcloud confirmed the breach in a blog post on Saturday. The company said most users had signed up through Facebook and did not have a password for account . Mixcloud recommended that users reset their passwords to be safe.
This means that the data being advertised on the dark web is now just a long list of email and uneditable passwords. Mixcloud data is currently being sold for $2,000.
The hacker behind the Mixcloud breach is referred to as A_W_S and has been involved in other hacks along with another hacker known as Gnosticplayers.
He previously claimed responsibility for hacking Canva (137 million users), Chegg (40 million), Poshmark (36 million), PromoFarma (26 million), RoadTrippers (25 million), StockX (6.8 million), and Wirecard Brazil (48 million euros).
When asked for proof of a breach, he only provided sample user data for four sites – namely Canva, Chegg, PromoFarma, and RoadTrippers.
Only Canva, Chegg and StockX have publicly acknowledged the violations. The other five companies have not admitted anything. These items were also put up for sale onlineon August 5th, earlier this year.
