BeatStars · Breach

Threat actor claims sale of 9 million BeatStars records

Nov 04, 2026 · 1 min read

A seller on a dark web forum claims to have stolen about 9 million records from BeatStars, the beat and music licensing marketplace, and dates the breach to November 3, 2026. The dataset, offered for $2,500 alongside an alleged vulnerability write-up, would include emails, IPs, device data and KYC fields. BeatStars has not confirmed an incident; the claim remains unverified.

By HIFY Radar newsroom Updated 11/04/2026 03:27 AM Get this every day →← Back to the feed 1 source

HighBreachNo software to update

In this article

What happened
Why it matters
What to do
For the technical team
Timeline
Sources

What happened

A threat actor on a dark web forum is selling a database they claim was taken from BeatStars, the beat and music licensing marketplace. According to DailyDarkWeb, the seller claims about 9 million records and dates the breach to November 3, 2026. The platform has not confirmed an incident.

Why it matters

If genuine, the data exposes emails, IPs, device data and KYC fields of creators, with risk of identity theft, account takeover and targeted phishing. Creators who receive payouts through the platform would be most affected. For now, this is only an unverified claim.

What to do

Monitor BeatStars official channels for confirmation, force password resets and enable two-factor authentication on platform accounts, and warn creators about phishing that uses KYC data.

For the technical team

Affected: BeatStars, marketplace de licenciamento de beats e música; base alegada de cerca de 9 milhões de registros com e-mails, · BeatStars, beat and music licensing marketplace (service, no versions cited).
Exploitation: Sale claim on a dark web forum, reported by DailyDarkWeb. BeatStars has not confirmed an incident and there is no independently verified exploitation.
Fix: Not applicable; this is an alleged leak, with no fix cited in the sources.
Vector: Alleged breach with no technical detail; the seller offers an alleged vulnerability with a full write-up alongside the data, with no component or exploitation condition described.
More details: The listing includes user account identifiers and email addresses, IPs, location and device information, KYC-related fields (recipient names, addresses and merchant metadata) and an alleged vulnerability with write-up, all offered for $2,500. Alleged breach date: November 3, 2026. DailyDarkWeb classifies the case as an unverified threat-actor claim, not confirmation of a breach.