Deezer data breach: 229.0M accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2023-01-02
In late 2022, the music streaming service Deezer disclosed a data breach that impacted over 240M customers. The breach dated back to a mid-2019 backup exposed by a 3rd party partner which was subsequently sold and then broadly redistributed on a popular hacking forum. Impacted data included 229M unique email addresses, IP addresses, names, usernames, genders, DoBs and the geographic location of the customer. Exposed data: dates of birth, email addresses, genders, geographic locations, ip addresses, names, spoken languages, usernames. The breach dates from Apr 22, 2019; Have I Been Pwned loaded it on Jan 2, 2023.
What to do
- If you had a Deezer account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
Sources
All live incidents on Threat Watch
