Quick Summary
SoundCloud has confirmed a data breach and ongoing denial of service (DoS) attacks. Approximately 20% of users were affected, with unauthorized access to email addresses and public profile information. The company is addressing connectivity issues caused by configuration changes made during the attacks, which were reportedly linked to the ShinyHunters cyber extortion group.
The Securityish Brief
SoundCloud, the popular audio streaming service, recently experienced a significant data breach and was subjected to multiple denial of service (DoS) attacks. The company confirmed the breach on Monday, revealing that unauthorized activity was detected in an ancillary service dashboard. This incident affected around 20% of its users, with attackers accessing email addresses and information already visible on public profiles.
In response to the breach, SoundCloud activated its incident response protocols and engaged third-party cybersecurity experts for investigation. Fortunately, sensitive data such as financial information and passwords were not compromised. The company believes that the attackers no longer have access to its data.
In the days leading up to the confirmation, users reported connection failures when accessing SoundCloud through VPNs, which are commonly used in regions where the platform is blocked, such as Russia, mainland China, and Turkey. SoundCloud’s configuration changes in response to the attacks caused these connectivity issues, leading to fears of permanent access loss.
Following the containment of the breach, SoundCloud faced DoS attacks that temporarily disrupted service for users accessing the platform via its website. While the service is currently operational, it remains unclear whether the same group responsible for the breach is behind the DoS attacks. Reports suggest that the ShinyHunters group is attempting to extort SoundCloud by threatening to leak the stolen data.
This incident highlights the ongoing risks associated with cyber threats, particularly for organizations that rely on user data. Users should remain vigilant and monitor their accounts for any suspicious activity, especially in light of potential data leaks.
Key Takeaways
- Check your SoundCloud account for any unauthorized activity, especially if you are among the affected users.
- Consider changing your password and enabling two-factor authentication for added security.
- Be cautious of phishing attempts that may arise from the leaked email addresses.
- Monitor your email accounts for unusual login attempts or communications related to the breach.
- Stay informed about updates from SoundCloud regarding the breach and any potential data leaks.
Key Terms & Concepts
- Denial of Service (DoS) Attack: In this article, a DoS attack refers to an attempt to make a service unavailable by overwhelming it with traffic.
- ShinyHunters: ShinyHunters is a cyber extortion group reportedly involved in the SoundCloud breach, attempting to extort the company regarding stolen data.
Read the original article here: https://www.helpnetsecurity.com/2025/12/16/soundcloud-breach-dos-vpn/
Your 5-Minute Securityish Brief
A weekly digest of cybersecurity news, phishing alerts, privacy tips, and emerging threats, simplified so anyone can understand what matters and why.
Securityish
Securityish explains cybersecurity, scams, data breaches, and privacy risks in simple language so you know what’s happening and how to protect yourself.
© 2026 Securityish
