SoundCloud confirms it was hit by a cyberattack, affecting users in Vietnam.

(Dan Tri Newspaper) - SoundCloud has officially confirmed that the service disruptions and VPN connection errors over the past few days were the result of a serious security attack.

The online music sharing platform SoundCloud has officially confirmed that it has been the target of a large-scale cyberattack, exposing the information of millions of users, including users in Vietnam.

The incident occurred after several days of users repeatedly reporting being unable to access the service via VPN.

Hackers successfully infiltrated the system, stealing a database including email addresses and user profile information (Photo: ST).

According to a notification from SoundCloud sent to BleepingComputer, the company detected "unauthorized activity" on the backend service dashboard and immediately activated its emergency response procedure.

This issue caused users in many countries, including Vietnam, to encounter a 403 "Forbidden" error when accessing the platform through Amazon CloudFront.

Initial investigations by BleepingComputer suggest that this breach may have affected approximately 20% of all SoundCloud users, an estimated 28 million accounts.

However, SoundCloud reassured that "no sensitive data (such as financial information or passwords) was compromised." The affected data was limited to email addresses and information displayed on users' public profiles.

To prevent unauthorized access, SoundCloud implemented system configuration changes, but this inadvertently disrupted VPN connections for general users. Currently, there is no specific timeframe for the full restoration of the service.

Notably, even after implementing these protective measures, SoundCloud continued to suffer denial-of-service (DoS) attacks, rendering the platform temporarily inaccessible on the web.

Although SoundCloud has not disclosed the attacker's identity, a confidential source at BleepingComputer revealed that the notorious hacking group ShinyHunters is responsible.

This group is allegedly extorting SoundCloud after obtaining the platform's user database.

Currently, SoundCloud asserts that it has blocked all unauthorized access and is working closely with third-party cybersecurity experts to strengthen its defenses and ensure the safety of user data in the future.

Source: https://dantri.com.vn/cong-nghe/soundcloud-xac-nhan-bi-tan-cong-mang-nguoi-dung-viet-nam-bi-anh-huong-20251216221342096.htm