Sonicbids
Disclosed Jun 16, 20206 years ago5,503 affectedConfirmed
In December 2019, the booking website Sonicbids suffered a data breach which they attributed to "a data privacy event involving our third-party cloud hosting services". The breach contained 752k user records including names and usernames, email addresses and passwords stored as PBKDF2 hashes. The data was provided to HIBP by breachbase.pw .
What is known
| People affected | 5,503 (as reported by the organization) |
|---|---|
| Disclosed | Jun 16, 2020 |
| Discovered | May 17, 2020 |
| Happened | Dec 29, 2019 |
| Attack | Vendor breach |
| Data exposed | Emails, Names, Passwords |
| Sector | Tech · US |
| Status | Confirmed |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Sonicbidsoag.ca.gov · Official notice | Official notice |
| Have I Been Pwned: Sonicbidshaveibeenpwned.com · Aggregator | Aggregator |
| Maine Attorney General breach notice archive: Sonicbidsmaine.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Jun 16, 2020 | |
| Maine AGresidents of ME | Jun 16, 2020 | 22 |
| Have I Been Pwnedaccounts in the data | Aug 18, 2020 | 751,700 |
History of this record
- 2026-09-25 · records_basis: hibp to organization · backfill source
- 2026-09-25 · records: 751700 to 5503 · backfill source
- 2026-09-25 · discovered: empty to 2020-05-17 · backfill source
- 2026-09-25 · hibp: empty to Sonicbids · backfill source
- 2026-09-25 · sector: other to tech · backfill source
- 2026-09-25 · attack: unknown to third-party · backfill source
- 2026-09-25 · data_types: [] to ["emails","names","passwords"] · backfill source
- 2026-09-25 · records_basis: empty to hibp · backfill source
- 2026-09-25 · records: empty to 751700 · backfill source
- 2026-09-25 · summary: empty to In December 2019, the booking website Sonicbids suffered a data breach which they attributed to "a data privacy event involving our third-party cloud hosting services". The breach contained 752k user records including names and usernames, e · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.