Good afternoon,
Last night I updated to the latest Cakewalk, and I haven't logged in for quite a long while.
I had to recover my BandLab password, and I used the password reset link.
Today I got a message from one of my monitoring services that my email and pw are now on the dark web. It is an email address that's never been leaked, and I could tell that it was my new pw. Needless to say, I have changed it again. I want to get word to someone at BandLab that it looks like some kind of hack has happened.
I'm pretty sure I wasn't phished, because I couldn't log in to BandLab until I performed the reset action.
Please perform an audit soon.
Thanks!
Chris (Cakewalk user since 1990's)
