ReverbNation – an online platform that currently assists more than three million musicians in building their careers suffered a data breach incident that exposed an undisclosed number of users' information.
An unauthorized party accessed the ReverbNation vendor’s computer systems and gained the user information contained in a backup of their database.
The information included the name, social security number, employer identification number, e-mail address, encrypted password, postal address, phone number, date of birth, and possibly other user information.
Source: https://www.databreaches.net/reverbnation-notifies-users-of-breach-recommends-changing-passwords/
TPRM report: https://scoringcyber.rankiteo.com/company/reverbnation
"id": "rev21574123",
"linkid": "reverbnation",
"type": "Data Leak",
"date": "09/2015",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'industry': 'Online Music Platform',
'name': 'ReverbNation',
'size': 'More than three million users',
'type': 'Company'}],
'attack_vector': 'Unauthorized Access',
'data_breach': {'data_encryption': 'Passwords were encrypted',
'number_of_records_exposed': 'Undisclosed',
'personally_identifiable_information': ['Name',
'Social Security '
'Number',
'Email Address',
'Postal Address',
'Phone Number',
'Date of Birth'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Name',
'Social Security Number',
'Employer Identification Number',
'Email Address',
'Encrypted Password',
'Postal Address',
'Phone Number',
'Date of Birth',
'Possibly Other User '
'Information']},
'description': 'ReverbNation, an online platform assisting more than three '
'million musicians in building their careers, suffered a data '
"breach incident that exposed an undisclosed number of users' "
'information. An unauthorized party accessed the ReverbNation '
'vendor’s computer systems and gained the user information '
'contained in a backup of their database. The information '
'included the name, social security number, employer '
'identification number, e-mail address, encrypted password, '
'postal address, phone number, date of birth, and possibly '
'other user information.',
'impact': {'data_compromised': ['Name',
'Social Security Number',
'Employer Identification Number',
'Email Address',
'Encrypted Password',
'Postal Address',
'Phone Number',
'Date of Birth',
'Possibly Other User Information'],
'systems_affected': ["Vendor's Computer Systems"]},
'initial_access_broker': {'entry_point': "Vendor's Computer Systems"},
'threat_actor': 'Unauthorized Party',
'title': 'ReverbNation Data Breach',
'type': 'Data Breach',
'vulnerability_exploited': 'Backup Database Access'}