HEROIC Analysts Uncover Jamendo Breach Affecting 6.4 Million Users

HEROIC analysts uncovered a breach tied to Jamendo, the free music platform, dated August 2024, that exposed 6,444,456 user records. The exposed data included email addresses and usernames. No passwords were part of this exposure. The only way to know if your account is included is to scan your email.

Even without a password in the mix, millions of email and username pairs is a goldmine for phishing. An attacker can send a message that looks like it comes from Jamendo itself, referencing your actual username to make the bait feel real.

Two Data Points, Millions of Targets

• Email Address: the main channel attackers use for phishing and for trying to reset passwords on other accounts.
• Username: your display name on the platform, useful for building a believable, personalized message.

The Math Behind 6.4 Million Targets

With 6.4 million records in circulation, even a low response rate to a phishing attempt adds up fast. The real risk here is not a hacked account, but a flood of convincing scam emails sent to a massive list of real, active addresses.

How a Streaming Platform's User List Gets Out

A leak like this usually begins when a service's own user records are accessed without permission and copied out in one large file. That file is then packaged and passed around on forums and messaging apps rather than staying inside the original system.

Were You Among the Millions in the Jamendo File?

Take a moment to scan your email and see what turns up. Since no passwords leaked, watch instead for phishing emails that reference your Jamendo username to seem legitimate. This holds whether you check a personal inbox or one you use for work.