Streaming Service Users Exposed in Tuned Global’s 981K Password Leak

HEROIC's threat intelligence team has catalogued a breach tied to Tuned Global, a B2B music streaming service based in Australia, stemming from an incident dated March 16, 2016 that later surfaced publicly on a hacking forum. The dataset contains 981,471 records, including email addresses, first names, last names, and passwords stored in plaintext.

Why the Tuned Global Password Leak Is Dangerous

Plaintext password storage means there was no scrambling or hashing standing between the database and anyone who accessed it. Attackers do not need to crack anything, the passwords are readable exactly as users typed them. Paired with a full name and email address, this gives an attacker a ready-made login for the original account and a strong first guess at passwords for any other account tied to the same person.

What Was Exposed in the Tuned Global Breach

• Email addresses
• Passwords stored in plaintext
• First names
• Last names
• 981,471 total records

Why This Matters

Tuned Global provides its streaming platform to other businesses, which means the accounts in this dataset likely belong to a mix of individual listeners and staff at partner companies. Because the passwords were never hashed, anyone reusing a Tuned Global password on a personal email account, a work account, or a banking site is at direct risk of account takeover. Full names paired with email addresses also make convincing phishing messages easier to write.

How Database Breaches Like This Happen

This is classified as a database breach, where attackers gained direct access to the backend system and exported user records in bulk. Storing passwords in plaintext, rather than as salted hashes, is one of the most basic security failures a service can make, since it turns a single database compromise into an immediate, total credential exposure for every user in the system.

Check If You Are Affected

If you ever created a Tuned Global account, or reused a password across streaming and personal accounts, it is worth checking your exposure. HEROIC's free breach scanner checks your email against more than 400 billion breached records, including this Tuned Global dataset, so you can find out quickly and update any reused passwords.