Sonicbids LLC notified users that their usernames and passwords were publicly accessible due to unauthorized access of their third-party cloud hosting instance. The unauthorized access occurred on December 29, 2019, and was discovered on May 17, 2020. Sonicbids reset all user passwords, took the site offline, and engaged outside specialists to remediate vulnerabilities. The incident involved credentials and basic identity information (names).