Major Private Music Tracker Hit by Massive Peer Scraping Attack, 19,000 Users Potentially Exposed
A private music torrent tracker, Orpheus Network, has reported a significant peer scraping attack that could potentially expose its 19,000 users' identities. The attack occurred on September 18th, with administrators confirming that an unknown actor successfully downloaded most of their torrent files and peer lists.
Person downloading music on computer
The breach exposed sensitive user data, including:
- Seeding IP addresses
- Client port information
- Active torrent seeding lists
The attack is particularly notable given Orpheus Network's exclusive nature, which requires either an invitation from an existing member or an administrator interview for access.
While administrators believe the attack was conducted by a single individual primarily interested in accessing the music library, the incident raises concerns about potential legal implications. Major industry organizations like the RIAA frequently monitor torrent sites, and similar private trackers have faced shutdowns in the past:
- Oink's Pink Palace (2007) - Shut down by IFPI and BPI
- What.cd (2016) - Closed after French authorities seized servers
The site currently remains operational, though this incident could signal increased scrutiny from music industry authorities. Recent job postings from major labels indicate a growing focus on identifying and preventing music leaks through private tracking networks.
Administrators detected the attack within six hours of its occurrence, though the full extent of how the collected data might be used remains unclear. This incident highlights the ongoing tension between private music sharing communities and industry enforcement efforts.