Thousands of Deezer users have had their data exposed on the Internet

January has barely begun, and it’s already causing problems for Deezer. On the first Monday of the year, the second, prof Data leakage By “Have I Been Pwned”. About 220 million people who use the music platform have had their personal data exposed. the Invade I reached out to some Brazilians and people from other countries. know more.

Deezer data leak

Users’ emails, dates of birth, IP addresses, name, languages, and even the country and city where users reside were exposed. Knowing this, Deezer notified everyone in the early hours of January 2nd. The company’s backup was revealed on April 22, 2019, but was only discovered in late 2022.

“The hack traced back to an exposed mid-2019 backup from a third-party partner that was subsequently sold and widely redistributed on a popular hacking forum,” they reported.

Brazilians join the list of those exposed

After nearly four years of leaking, they recently discovered that even Brazilians were part of the show. In fact, most Brazilians. There were about 37.1 million leaked accounts that managed to register in Brazil. The country lost the highest position only to France, with 46.2 million users reached.

Deezer, in turn, issued a note in support of the discovery:

We have learned that one of our partners experienced a data breach in 2019 and a snapshot of non-confidential information was disclosed to our users.

The news is that the music streaming platform has also stated that it is no longer working with the resource. By law, Deezer is not entirely responsible for the story, but it may not be without punishment. to me TechnoblogDeezer confirmed the leak.

“The leak occurred when a partner, with whom we have not worked since 2020, experienced a data breach. However, no sensitive information, such as passwords and CPFs, was exposed. Our database remains secure. But we always recommend that users update passwords.” them regularly to keep their data more secure.

Danilo Roque, from FAS Advogados, stated that if the user is harmed by exposing the data, compensation is fully applicable. For compensation, it will be necessary to prove the damage caused in court.