Sonicbids Data Breach

What happened

In December 2019, the booking website Sonicbids suffered a data breach which they attributed to "a data privacy event involving our third-party cloud hosting services". The breach contained 752k user records including names and usernames, email addresses and passwords stored as PBKDF2 hashes. The data was provided to HIBP by breachbase.pw.

Exposed data

Recommended actions

• Change your Sonicbids password immediately, and update it anywhere you reused the same password.
• Enable two-factor authentication on the affected account and on your critical services (email, banking).
• Watch for targeted phishing emails referencing Sonicbids — attackers weaponise breach data quickly.
• Check whether your email address appears in this breach on haveibeenpwned.com.