StreamElements discloses third-party data breach after hacker leaks data

StreamElements disclosed a data security incident involving a third-party provider it no longer uses after a threat actor posted samples claimed to be from 210,000 customers (names, addresses, phone numbers, emails). The attacker alleges an info-stealer malware infection led to takeover of an internal account and access to the order management system for data spanning 2020–2024; StreamElements says its own servers were not breached, phishing attempts have been observed, and an investigation is underway.