A significant data breach on the streaming service Brand New Tube exposed users' names and IP addresses.
A significant security flaw has been discovered on BrandNewTube, a YouTube alternative that was founded in the UK. Several users who received an email that revealed their names, genders, emails, and IP addresses have gotten in touch with us. The email also specifically criticizes Mohammad Butt and Sonia Poulton for failing to take the appropriate action in response to it. Mohammad Butt is listed as the company’s sole director and Sonia Poulton is the well-known host of Rise.
On their twitter account, other users have commented:
unitynewsnetwork has contacted BNT for comment because it does seem that some forums have allowed the public access to all of this information in Zip Code files. They have promised on their Twitter account that they will return sooner rather than later, but the site is currently completely offline. The following was recently posted by Sonia Poulton:
This Breach has also made it to Haveibeenpawned Database. so now you can enter your email address and get to know if you are affected by the attack.
Experienced cybersecurity journalist tracking active ransomware outbreaks, regulatory compliance shifts (GDPR/CCPA), and global corporate data breach remediations.
Security Digest
Get the latest cybersecurity news, vulnerability alerts, and threat intelligence delivered to your inbox.
Related Articles
CISA Issues Nine Urgent Advisories on Industrial Control Systems Vulnerabilities
In a critical bulletin released on September 18, 2025, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) published nine new advisories detailing high-severity vulnerabilities affecti...
Threat IntelligenceCritical Google Chrome Zero-Day CVE-2025-10585: What You Need to Know
Google has just patched a critical zero-day vulnerability in its Chrome web browser—CVE-2025-10585—which has been actively exploited in the wild. This flaw, a type confusion issue in Chrome’s V8 Ja...
Threat IntelligenceMalware Analysis Report on a malicious listener deployed on Ivanti Endpoint Manager Mobile (EPMM) systems
U.S. Cybersecurity and Infrastructure Security Agency’s new Malware Analysis Report on a malicious listener deployed on Ivanti Endpoint Manager Mobile (EPMM) systems by chaining CVE-2025-4427 and C...
Threat IntelligenceMSSP Alert Top 250 for 2024: A Deep Dive into the State of Cybersecurity
Discover the key findings from the 2024 MSSP Alert Top 250 report. Explore trends in MSSP growth, profitability, in-house SOCs, and the critical services defining modern cyber defense.