Deezer: the data of millions of accounts is for sale on the Internet

The account data of several million Deezer users has been recovered and a hacker is offering them for sale. According to Restore Privacyit is about more than 250 million accounts in total, including 46.2 million belonging to French people.

The file contains personal information, such as e-mail address, last name, first name, date of birth, gender, city and country of residence, creation date and the identifier corresponding to each account. The message posted by the hacker claims that another archive containing session data, including lists of artists listened to and users’ music preferences, is also available in the file.

How do we understand that Deezer has been hacked? The streaming service acknowledges that the data is authentic, that it dates from 2019, but ensures that its systems have not been hacked. It would come from another company. “The data in question had been processed by a third-party partner with whom we no longer work since 2020, and it is this partner that was subject to this incident”, noted the group without mentioning the name.

At the same time, Deezer assures that the leak does not include any sensitive data, such as user passwords or banking information. The service still prompts users to change their passwords.