Incident tracker

What happened to other people. And the lesson.

A running log of publicly reported incidents involving creators, athletes, artists, executives and their families. Facts only, sourced, with the one thing each case teaches. Updated as they happen.

Early 2025EmailCreators

Over 200,000 YouTube creators targeted with fake brand-deal phishing

Targeted: YouTube creators

Security firm CloudSEK documented a campaign in which attackers sent 500 to 1,000 phishing emails per sending account, posing as brands with "collaboration proposals" and "marketing opportunities." Payloads were hosted on trusted platforms such as OneDrive and disguised as contracts and briefs, tailored by channel size and content type.

The lessonThe attachment is the attack. Verify the domain's age and the person's existence before anything opens.

Source: Net Influencer

2024YouTubeCreators

Hijacked channels renamed and used for deepfake crypto livestreams

Targeted: YouTube channels, including a major Australian broadcaster

Bitdefender Labs tracked more than 9,000 malicious livestreams on hijacked YouTube channels. Attackers used fake sponsorship emails to steal session cookies, bypass two-factor, remove managers, hide videos, rebrand channels to impersonate companies and public figures, and stream deepfake "double your crypto" giveaways. Australian broadcaster 7News reported its own channel hijacked for AI-generated Musk streams.

The lessonTwo-factor doesn't stop a stolen session. Signing out everywhere and cleaning the device does.

Source: Bitdefender Labs

2023, lawsuit filed 2026Cloud accounts and emailAthletes & artists

Forty-five unreleased songs stolen and leaked via collaborators’ accounts

Targeted: Ariana Grande and collaborators

A lawsuit alleges hackers compromised digital accounts and devices belonging to photographers and producers who worked with the artist, obtaining 45 unreleased songs in 2023 that were later leaked, and in 2024 used a lookalike Gmail address and domain impersonating a photographer to obtain unreleased photos from a digital technician. The complaint says material was sold on the dark web.

The lessonYour security is your circle's security. Unreleased work lives in locked, logged storage, not in DMs.

Source: Music Business Worldwide

January 2020Instagram DM and emailAthletes & artists

Man indicted for stealing 50 GB of unreleased music by impersonating a producer

Targeted: Recording artists and two management companies

Federal prosecutors charged an Austin, Texas man with hacking a producer's social media account and privately messaging artists to send unreleased tracks to a fake email address incorporating the producer's name, and with hacking two music management companies. More than 50 gigabytes of music, some unreleased, was allegedly taken and leaked.

The lessonA "new email" from someone you trust is verified by a call to the number you already have. Every time.

Source: The Hollywood Reporter

2025Social media DMsAthletes & artists

FBI and NCAA issue joint warning on sextortion targeting student-athletes

Targeted: College athletes

The FBI and NCAA warned that athletes' public profiles, rosters, schedules and NIL activity make them targets for cyber-enabled sexual exploitation. Attackers personalize phishing, impersonate schools and platform support, and escalate friendly conversations into extortion. The FBI's IC3 logged more than 75,000 sextortion submissions in 2025.

The lessonPaying never ends it. Document, don't delete, report through the right channels, and have the plan before it happens.

Source: Bitdefender / FBI

2024CarrierExecutives & families

SIM swap losses remain in the tens of millions even as US complaints fall

Targeted: Mobile subscribers in the US and UK

The FBI's 2024 Internet Crime Report logged 982 SIM-swap complaints and roughly $26 million in losses, down from $72 million in 2022, while the UK fraud body Cifas reported a more than tenfold surge in unauthorized SIM swaps. A swapped number is rarely the end goal; it is the key used to reset email, intercept codes and drain accounts.

The lessonA five-minute call to your carrier for a PIN and port-freeze closes the door most people don't know is open.

Source: FBI IC3 via Efani

We log only what has been publicly reported by the people involved, the platforms, law enforcement or reputable press. We never log client matters. Corrections: intake@shutout.io.

Begin

Every one of these had a door that could have been closed.

Find yours before someone else does.