Pocket FM is an audio entertainment platform that hosts audio series and works with a network of writers who upload content and personal documentation to their platform profiles. The company recently notified a small number of affected writers that their personal information was involved in a security incident.
Platforms that collect sensitive documentation from contributors have a responsibility to protect that information and to promptly notify anyone affected when a breach occurs.
Pocket FM’s Data Breach Investigation
According to a notification letter filed with the New Hampshire Attorney General’s Office, Pocket FM became aware of a cybersecurity incident after receiving a communication from an unauthorized third party. Following an investigation supported by external cybersecurity experts and coordinated with federal law enforcement, the company determined that an unauthorized third party gained access to a storage location containing certain data about Pocket FM writers and downloaded data from that location. Pocket FM stated that the unauthorized activity began on May 1, 2026, and that the last observed unauthorized activity occurred on May 25, 2026.
Pocket FM explained that the impacted information varied by individual, depending on which documents a given writer had uploaded to their profile. Writers who had not uploaded such documents were not necessarily impacted, but the company chose to notify a wider group out of an abundance of caution.
Breaches affecting platforms that host user-uploaded identity and financial documents present a particular risk because a single exposed profile can combine an identifying document, such as a passport or driver’s license, with financial account details in one place. This combination can make it easier for bad actors to attempt account takeover or apply for credit fraudulently in an affected individual’s name. Companies that host user-generated content increasingly attract this kind of unauthorized access because of the breadth of personal documentation users may choose to upload over time.
Following discovery, Pocket FM stated that it contained the unauthorized access and took steps to further secure its environment, including reviewing cloud and workspace logs, revoking and rotating credentials, reviewing and securing secrets, restricting access, enhancing monitoring, and deploying additional forensic tooling. The company also indicated it is continuing to evaluate further security measures to reduce the risk of future incidents.
When Did This Breach Occur?
Pocket FM stated that the unauthorized activity began on May 1, 2026, and that the last observed unauthorized activity occurred on May 25, 2026. The company began sending notification letters to affected individuals on July 31, 2026.
What Information Was Breached?
Pocket FM stated that the information involved varied by individual based on the documents each writer had uploaded to their profile, and may have included unique author identifiers, Social Security numbers, government-issued identification documents such as passports and driving licenses, bank statements and account details, debit card information, and tax-related documents and information.
What You Can Do
Individuals who received a notification letter from Pocket FM should take steps to protect themselves, including:
- Enrolling in the complimentary 24-month identity monitoring services offered through IDX
- Monitoring credit reports and financial statements for unfamiliar activity
- Placing a fraud alert or security freeze on credit files with the major credit bureaus
- Remaining alert to phishing attempts referencing Pocket FM or writer account activity
- Reporting any suspected identity theft to the FTC or a state Attorney General
File a Data Breach Lawsuit Against Pocket FM
If you received a notice from Pocket FM about this data breach, you may be entitled to compensation. Affected writers may be able to pursue legal action to recover damages related to the exposure of their personal and financial information.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
