October 4, 2024

Skylight Webzine

Online since 2000

Tunecore was hacked!


This is the notice that received via e-mail, the customers of the online platform Tunecore which represents thousands of artists in the music industry for distribution, publishing, promotion and other activities that are relevant to the musical products.

“Dear TuneCore Customer,

We greatly value your business and respect the privacy of your information, which is why we are writing to let you know about a data security breach that may have resulted in unauthorized access to some of our customers’ personal data and account information.

We recently discovered suspicious activity on TuneCore’s servers in November, and that on November 17th an individual illegally collected information from our servers.  We are actively working with law enforcement to investigate this unlawful act, and we have retained a leading cybersecurity firm to help prevent this from happening again.

It’s possible that the attacker may have had access to some of our customer data.  The data on the compromised servers included: customers’ names, addresses (if you’ve shared that information with TuneCore), email addresses, TuneCore account numbers, and protected TuneCore passwords. In addition, for those customers who provided us with billing information, the servers stored: billing addresses; the last 4 digits of credit card numbers and their expiration dates, bank names and the last 4 digits of bank account numbers and the last 4 digits of bank routing numbers, and the name and address associated with the bank account on file. Full financial account information is never stored with TuneCore.

Although TuneCore passwords were stored in a protected form, it is possible for a determined hacker with sufficient time, using advanced computing tools, to recover those.  Therefore, in an abundance of caution, we have invalidated your current TuneCore password, and are requesting that you log in to your TuneCore account as soon as possible to set a new password following the steps outlined below. You should also change your password on any other accounts or websites that share your previous TuneCore password.

TuneCore takes data security very seriously, especially the security of our customers’ personal information.  TuneCore already had in place a number of security measures, including: manual review of all requests for payment, restricting access to our main website and protecting account passwords.  We are also working to further enhance our network and software security, and will continue to do so in the weeks and months ahead.

If you have any further questions, please refer to our FAQ page. We sincerely apologize for this inconvenience, and promise that we are dedicated to keeping your information secure. We thank you for being a part of the TuneCore community, and appreciate the continued opportunity to serve you.

Respectfully,

Scott Ackerman
CEO, TuneCore”

Source: Tunecore
Image: Digital Music News