Security Affairs
Dark Caracal Deploys New Go Malware With Ethereum-Based C2 Fallback|Australian Police Charge Two Over TeamPCP Credential Theft|Meta to Pay Up to $18B Over Teen Social Media Use|CISA Warns Water Utilities: Find Your Exposed PLCs Before Attackers Do|OpenAI banned Russian ChatGPT accounts backing covert influence operation|CISA Red Team Fully Compromised Two Critical Infrastructure Orgs|FBI Seizes China-Linked Hacking Platforms QScan and QTRouter Used Against Critical Infrastructure|U.S. CISA adds Gitea flaw to its Known Exploited Vulnerabilities catalog|88 ID Verification Breaches Show the Cost of Collecting Identity Data|WhatsApp Adds Stronger Security as Passkeys Hit 1 Billion|Operation Jackal: 58 Arrests Expose the Money Laundering Machine Behind Global Scams|Norway ’s Digital Government Infrastructure Hit by a new DDoS Attack|Dark Caracal Deploys New Go Malware With Ethereum-Based C2 Fallback|Australian Police Charge Two Over TeamPCP Credential Theft|Meta to Pay Up to $18B Over Teen Social Media Use|CISA Warns Water Utilities: Find Your Exposed PLCs Before Attackers Do|OpenAI banned Russian ChatGPT accounts backing covert influence operation|CISA Red Team Fully Compromised Two Critical Infrastructure Orgs|FBI Seizes China-Linked Hacking Platforms QScan and QTRouter Used Against Critical Infrastructure|U.S. CISA adds Gitea flaw to its Known Exploited Vulnerabilities catalog|88 ID Verification Breaches Show the Cost of Collecting Identity Data|WhatsApp Adds Stronger Security as Passkeys Hit 1 Billion|Operation Jackal: 58 Arrests Expose the Money Laundering Machine Behind Global Scams|Norway ’s Digital Government Infrastructure Hit by a new DDoS Attack|
Advertisement

Ad Placeholder

Full Width × 90

Breaking News

OurMine hacked Vevo and leaked 3.12 TB internal files, then delete them

The notorious OurMine hacker crew has claimed responsibility for the breach of the popular video streaming service Vevo. Another clamorous data breach made the headlines again, this time the victim is the popular video streaming service Vevo that was hacked by the popular hacking group OurMine. Vevo is an American multinational video hosting service founded on December 8, 2009, as a joint […]

vevo hack ourmine

The notorious OurMine hacker crew has claimed responsibility for the breach of the popular video streaming service Vevo.

Another clamorous data breach made the headlines again, this time the victim is the popular video streaming service Vevo that was hacked by the popular hacking group OurMine.

Vevo is an American multinational video hosting service founded on December 8, 2009, as a joint venture between the “big three” record companies, Universal Music Group (UMG), Sony Music Entertainment (SME) and Warner Music Group (WMG).

It also owned by the official media organization of the Government of Abu Dhabi, Abu Dhabi Media,  and Alphabet Inc, the parent company of Google Alphabet Inc.

The notorious Saudi Arabian OurMine group has hacked Vevo and leaked about 3.12 TB worth of internal files.

vevo hack ourmine
OurMine accessed Vevo’s data including internal sensitive office documents, videos, and promotional materials.

vevo hack ourmine 2.png
OurMine leaked the huge trove of data, roughly 3.12 terabytes stolen from the servers of the company, on its website on late Thursday.

Later the company removed the stolen information from the website on Vevo’s request.

OurMine group leaked data from Vevo after one of its employees was disrespectful to an OurMine member on LinkedIn.

OurMine first attempted to warn Vevo of the data breach privately, unfortunately for the company, one of its employees responded,

“F*** off, you don’t have anything,” it went public with the data breach and leaked Vevo files.

and in response, the hacker group leaked the precious files.

OurMine shared the following motivation about the hack.

“We leaked it because yesterday we’ve talked with an employee from VEVO about the leak, and that’s what he said:” 

Ourmine hacked vevo

At the time I was writing, most of the links redirect to a Vevo Box.com login page, a notice states that the OurMine “deleted the files because of a request from VEVO.”

According to Gizmodo, that first reported the data breach, the “majority of the [leaked] files seemed pretty mild—weekly music charts, pre-planned social media content, and various details about the artists under the record companies’ management,” albeit a few documents contained sensitive materials.

Variety, who analyzed the stolen documents, reported that the leaked archive included notes on around 90 artists.

“The 3.12-terabyte trove of stolen documents included Vevo’s internal dossiers on about 9o artists, including Ariana Grande, Britney Spears, Calvin Harris, Florida Georgia Line, Jennifer Lopez, Justin Bieber, Katy Perry, Madonna, One Direction, Sia, Taylor Swift, The Weeknd, and U2.”  states Variety.

OurMine did not provide details of the hack or information for how long they have been accessing the Vevo servers or whether they have accessed financial data and credentials.
Responding to Gizmodo inquiry, a Vevo spokesperson told Gizmodo that the company “can confirm that Vevo experienced a data breach as a result of a phishing scam via Linkedin. We have addressed the issue and are investigating the extent of exposure.”

OurMine hacker group recently defaced WikiLeaks website with a DNS redirect, it has also hijacked the official Twitter and Facebook accounts for Sony PlayStation Network (PSN) and claimed to have stolen PSN database.

The notorious Saudi Arabian group also hacked social media accounts of HBO and Game of Thrones.

OurMine hacked the Netflix US Twitter account (@Netflix) in December to promote its website and hacking services, it is known for its attacks against high-profile Twitter accounts. The list of victims is very long and includes Mark ZuckerbergTwitter co-founder Evan Williams, David Guetta Daniel Ek, former Twitter CEO Dick Costolo, Twitter CEO Jack Dorsey, the CEO and founder of Spotify, Google CEO Sundar Pichai, and many others.

[adrotate banner=”9″]

Pierluigi Paganini

(Security Affairs – OurMine, data breach)

[adrotate banner=”12″]