Hello @Erwin62 As you may have noted, the data breach occurred in 2019, not in 2022. Immediately after learning of the data breach in November 2022, we contacted the CNIL (Commission Nationale de l'Informatique et des Libertés), with whom we have been working ever since, particularly with regard to the communication we must make to users.
In order not to wait for the outcome of this work, we published an article on our support site to inform the users concerned about the data leak. We are currently finalizing our user communication with the CNIL, which will be sent to those affected by the breach.
The data included in the sample are mainly email address, date of birth (usually in the form "01-01-XXXX" since we only ask for age), name (usually a pseudonym), gender, language used, country, general information regarding subscription, and communication preferences (opt-in/opt-out). The sample does not contain any sensitive data, passwords, payment data, service usage data (such as listening history), geolocation data, or data that would allow for the description of the user habits. Furthermore, it is important to note that this is old data, dating back more than three years.