Myspace has admitted that details of millions of its users have been posted for sale online and has blamed the same hacker behind the recent dumps of LinkedIn and Tumblr data.
Rumours that the data was up for sale began circulating this week, and the owner of Myspace, Time Inc, has now confirmed that this is the case.
“Shortly before the Memorial Day weekend [30 May] we became aware that stolen Myspace user log-in data was being made available in an online hacker forum. The data stolen included user log-in data from a portion of accounts that were created prior to June 11 2013 on the old Myspace platform,” the firm said.
Anyone with an account on the platform before 11 June 2013 could be affected, as email addresses, Myspace usernames and Myspace passwords were all taken during the hack.
Anyone with an account dating from before this time will need to create a new password.
No financial information was taken during the attack, and users of Time services are not affected.
Myspace claimed to know who is responsible for the attack, blaming it on a Russian cyber hacker with the moniker ‘Peace’.
“This same individual is responsible for other recent criminal attacks such as those on LinkedIn and Tumblr, and has claimed on the paid hacker search engine LeakedSource that the data is from a past breach. This is an ongoing investigation, and we will share more information as it becomes available,” the firm said.
Time has informed law enforcement agencies and is working with them to identify the perpetrator.
Time chief financial officer Jeff Bairstow said that the firm is doing everything it can to mitigate the impact of the attack.
“We take the security and privacy of customer data and information extremely seriously, especially in an age when malicious hackers are increasingly sophisticated and breaches across all industries have become all too common," he added.
“Our information security and privacy teams are doing everything we can to support the Myspace team.”
Users are told that their non-existent 'iPhoneID' is expiring soon
Expansion of SDK intended to expand Amazon Alexa ecosystem
Locky returns from a prolonged rest with two new variants
AMD lambasted over Radeon RX Vega pricing that will add an extra £100 to RX Vega 56 and 64 graphics cards
Company accused of failing to tell anyone that the launch prices were only introductory offers