All breaches
8tracks data breach18M accounts compromised on 2017-06-27
Verified
8tracks (8tracks.com) was the source of a data breach dated 2017-06-27, exposing 17,979,961 accounts. The details below are mirrored from Have I Been Pwned and reflect the source's account of the incident at the time of publication.
Incident Report
| Target Organization | 8tracks |
|---|---|
| Source Name | 8tracks |
| Domain | 8tracks.com |
| Breach Date | 2017-06-27 |
| Added to HIBP | 2018-02-16 |
| Last Modified | 2019-08-25 |
| Accounts Compromised | 17,979,961(18M) |
| Data Exposed | Email addressesPasswords |
| Status | Verified by HIBP |
Description
In June 2017, the online playlists service known as 8Tracks suffered a data breach which impacted 18 million accounts. In their disclosure, 8Tracks advised that "the vector for the attack was an employee’s GitHub account, which was not secured using two-factor authentication". Salted SHA-1 password hashes for users who didn't sign up with either Google or Facebook authentication were also included. The data was provided to HIBP by whitehat security researcher and data analyst Adam Davies and contained almost 8 million unique email addresses. The complete set of 18M records was later provided by JimScott.Sec@protonmail.com and updated in HIBP accordingly.
Disclaimer
HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.