Data breach

Raaga: a data breach

In December 2025, data allegedly breached from the Indian streaming music service "Raaga" was posted for sale to a popular hacking forum . The data contained 10M unique email addresses along with names, genders, ages (in some cases, full date of birth), postcodes and passwords stored as unsalted MD5 hashes.

The record

Organisation
Raaga →
Identity
Raagaidentified by its domain in a verified breach record
Records affected
10,225,145 records
Data exposed
Ages, Dates of birth, Email addresses, Genders, Geographic locations, Names, Passwords
Sector
Not recorded
Occurred
2025-12-15
Disclosed
2026-01-19
First recorded here
2026-09-09

Fastnexa security experts

Worried the same could happen to your company?

If you are a customer or supplier of Raaga, or work in the same industry, a Fastnexa security expert can tell you what this means for your data and test whether the same attack would work on you.

Book a 30-min callWhatsApp us

Think you’ve already been hit? Don’t wait on a form: call or WhatsApp +1 (732) 454 2616. We reply within 1 hour, 24/7. Emergency help →

Sources (1)

One source so far.

  1. Have I Been Pwned ↗First reported

    2026-01-19