SoundCloud confirms breach after member data stolen, VPN access disrupted

SoundCloud detected unauthorized access to an ancillary service that exposed a database of email addresses and public profile information for an estimated 20% of users (~28 million accounts). The company says no passwords or financial data were accessed, has blocked the unauthorized access and implemented security improvements, and reported VPN disruptions and temporary denial-of-service impacts during the response; BleepingComputer reports the ShinyHunters extortion group is suspected and may be attempting to extort SoundCloud.