The music video platform has fallen victim to a data breach after a group of hackers associated with a larger network, OurMine, has recovered more than 3 terabytes of VEVO’s internal files, consisting of promotional statistics and video count statistics on VEVO’s most prominently watched artists. The hackers also made off with more serious information, including alarm code procedures at use in the company’s UK office.
OurMine has previously boasted its responsibility for WikiLeaks, HBO, and Facebook Barcelona hacks. The hackers are said to have infiltrated VEVO via an employee account on Okta, a workplace application utilized by the company. Yet when OurMine reached out to VEVO to share the news of their security breach, a disbelieving employee brushed off the hacker network, telling the group to “f*ck off,” claiming they had not obtained “anything” at all.
Inflamed by the response, OurMine has since gone on to leak the stolen information, even removing several of the URLs that link to stolen documents at VEVO’s request. The music sharing service has acknowledged and confirmed the attack, noting “We can confirm that Vevo experienced a data breach as a result of a phishing scam via LinkedIn. We have addressed the issue and are investigating the extent of the exposure.