OurMine hacked Vevo and leaked 3.12 TB internal files, then delete them
7.9.2017 securityaffairs CyberCrime

The notorious OurMine hacker crew has claimed responsibility for the breach of the popular video streaming service Vevo.
Another clamorous data breach made the headlines again, this time the victim is the popular video streaming service Vevo that was hacked by the popular hacking group OurMine.

Vevo is an American multinational video hosting service founded on December 8, 2009, as a joint venture between the “big three” record companies, Universal Music Group (UMG), Sony Music Entertainment (SME) and Warner Music Group (WMG).

It also owned by the official media organization of the Government of Abu Dhabi, Abu Dhabi Media, and Alphabet Inc, the parent company of Google Alphabet Inc.

The notorious Saudi Arabian OurMine group has hacked Vevo and leaked about 3.12 TB worth of internal files.

OurMine accessed Vevo’s data including internal sensitive office documents, videos, and promotional materials.

OurMine leaked the huge trove of data, roughly 3.12 terabytes stolen from the servers of the company, on its website on late Thursday.

Later the company removed the stolen information from the website on Vevo’s request.

OurMine group leaked data from Vevo after one of its employees was disrespectful to an OurMine member on LinkedIn.

OurMine first attempted to warn Vevo of the data breach privately, unfortunately for the company, one of its employees responded,

“F*** off, you don’t have anything,” it went public with the data breach and leaked Vevo files.

and in response, the hacker group leaked the precious files.

OurMine shared the following motivation about the hack.

“We leaked it because yesterday we’ve talked with an employee from VEVO about the leak, and that’s what he said:”

At the time I was writing, most of the links redirect to a Vevo Box.com login page, a notice states that the OurMine “deleted the files because of a request from VEVO.”
According to Gizmodo, that first reported the data breach, the “majority of the [leaked] files seemed pretty mild—weekly music charts, pre-planned social media content, and various details about the artists under the record companies’ management,” albeit a few documents contained sensitive materials.

Variety, who analyzed the stolen documents, reported that the leaked archive included notes on around 90 artists.

“The 3.12-terabyte trove of stolen documents included Vevo’s internal dossiers on about 9o artists, including Ariana Grande, Britney Spears, Calvin Harris, Florida Georgia Line, Jennifer Lopez, Justin Bieber, Katy Perry, Madonna, One Direction, Sia, Taylor Swift, The Weeknd, and U2.” states Variety.

OurMine did not provide details of the hack or information for how long they have been accessing the Vevo servers or whether they have accessed financial data and credentials.
Responding to Gizmodo inquiry, a Vevo spokesperson told Gizmodo that the company “can confirm that Vevo experienced a data breach as a result of a phishing scam via Linkedin. We have addressed the issue and are investigating the extent of exposure.”
OurMine hacker group recently defaced WikiLeaks website with a DNS redirect, it has also hijacked the official Twitter and Facebook accounts for Sony PlayStation Network (PSN) and claimed to have stolen PSN database.

The notorious Saudi Arabian group also hacked social media accounts of HBO and Game of Thrones.

OurMine hacked the Netflix US Twitter account (@Netflix) in December to promote its website and hacking services, it is known for its attacks against high-profile Twitter accounts. The list of victims is very long and includes Mark Zuckerberg, Twitter co-founder Evan Williams, David Guetta Daniel Ek, former Twitter CEO Dick Costolo, Twitter CEO Jack Dorsey, the CEO and founder of Spotify, Google CEO Sundar Pichai, and many others.