Drake's YouTube Channel Compromised by Automated Music Distribution Exploit

Drake's official YouTube page — 33 million subscribers and a verified checkmark sitting pretty — just got turned into a meme for a weekend. According to AllHipHop, hackers uploaded two unauthorized tracks to the channel on July 26–27: Kendrick Lamar's Grammy-drenched "Not Like Us" and a 1:47 troll track called "Kendrick a Meanie (Diss)" with a thumbnail of somebody rapping in a daycare, toy cars everywhere, and captions begging viewers to follow two Instagram accounts. The whole thing rode under Drake's name, blue tick and all, before it got pulled.

The Exploit Nobody Saw Coming

Here's the part that should worry every label and distributor right now. As reported across both HotNewHipHop and AllHipHop's coverage, the attackers didn't crack a single password. They exploited a loose music distributor called OffStepMusic — a service with what one widely-circulated post on X described as "barely no moderation at all" — to publish songs under artists' names. YouTube's automatic matching system then auto-routed those uploads straight onto verified official pages. No breach, no credentials, just a backdoor with the lights on. Over a dozen high-profile artists got hit in the same window: Kanye West, Playboi Carti, Travis Scott, Frank Ocean, D4vd, even Kendrick Lamar himself briefly had two unreleased songs surface on his channel. Playboi Carti took the worst of it — more than 20 leaked tracks dropped on his page at once. Neither Drake nor YouTube had issued a public statement at the time of writing, and that's its own kind of silence.

Why Drake's Page Became the Punchline

Let's be honest about why this specifically detonated online. "Not Like Us" isn't just a diss track anymore — it's a cultural landmark. Kendrick released it in May 2024 as the closing shot of a nine-track war that kicked off when Drake and J. Cole crowned themselves rap's "Big Three" alongside Lamar, who immediately rejected the framing. The track went on to win five Grammys and anchor Kendrick's Super Bowl halftime show in February 2025. Drake's defamation suit against Universal Music Group over the lyrics got tossed by a federal judge in October 2025 on the grounds that the bars were protected artistic opinion. Drake appealed, and that case is still grinding through the Second Circuit. So when a hack ends up re-uploading the single most damaging song in Drake's catalog onto his own verified channel, under his own name? That's not random. That's cosmic irony with a routing number. The troll track was the cherry on top — spoon bars, cheese-in-socks bars, the kind of pen game that exists purely to make sure the screenshot ends up on every timeline.

What I'm Watching Next

The OffStepMusic vector is the real story here, and it's going to ripple. If one under-moderated distributor can push uploads directly to verified YouTube and Apple Music pages, every A-list artist and every indie with a dream is sitting on the same vulnerability. Streaming platforms have spent years building automated ingestion pipelines to make distribution frictionless for legitimate artists — turns out that same infrastructure is a gift-wrapped exploit for whoever finds the loose endpoint first. Watch how YouTube responds. Watch whether OffStepMusic keeps existing as a company by month's end. And keep an eye on the Drake v. UMG appeal timeline — because "Not Like Us" just got an unsolicited re-release on the plaintiff's own channel, and somewhere a legal team is drafting a memo about what that means for a song already at the center of a defamation fight.