What AlphaTheta says
AlphaTheta has identified a vulnerability in the PRO DJ LINK function used by rekordbox and certain CDJ/XDJ models. According to the notice, a third party who first gains unauthorized access to that network could view data stored on a connected Windows PC or Mac, or on USB and SD media inserted into linked players.
The company says it has not confirmed any resulting damage and is withholding technical details until a fix is available. A response-status page will carry further updates.
What to do now
Update rekordbox 7 or 6, including the iOS or Android edition you use, to the latest available version. Do not place sensitive files on performance USB or SD media, and keep any Wi-Fi network used by a player secured with a strong password.
For clubs and touring crews, treat the PRO DJ LINK network as production infrastructure: control physical and wireless access, document the versions in the booth, and check AlphaTheta's notice before the next changeover.