Clubhouse denies data breach, dubs the report misleading

Popular audio chat platform Clubhouse has downplayed any breach or hack after a report said that a database containing 1.3 million scraped records of the platform’s users were posted on a popular hacker forum.

According to a recent report, the leaked database contains a variety of user-related information from Clubhouse profiles, including user ID, name, photo URL, username, Twitter handle, Instagram handle, number of followers, number of people followed by the user, account creation date, and invited by user profile name.

The invitation-only social media app for iOS that facilitates auditory communication termed the report as misleading and false. “Clubhouse has not been breached or hacked. The data referred to is all public profile information from our app, which anyone can access via the app or our API,” say reports quoting Clubhouse’s statement on Twitter.

If the CyberNews report is to be believed the scraped data posted on the hacker forum can be used by cybercriminals to carry out targeted phishing or other types of social engineering attacks, and that such database can also be used by threat actors to brute-force the passwords of Clubhouse profiles.

Interestingly, the development comes close on the heels of an archive with data purportedly scraped from 500 million LinkedIn profiles reportedly put for sale on a popular hacker forum emerged, with another 2 million records leaked as a proof-of-concept sample by people behind the hack. Earlier, Facebook witnessed data leak of 533 million users, including 6.1 million Indians.