SoundCloud: a data breach
In December 2025, SoundCloud announced it had discovered unauthorised activity on its platform . The incident allowed an attacker to map publicly available SoundCloud profile data to email addresses for approximately 20% of its users. The impacted data included 30M unique email addresses, names, usernames, avatars, follower and following counts and, in some cases, the user’s country. The attackers later attempted to extort SoundCloud before publicly releasing the data the following month.
The record
- Organisation
- SoundCloud →
- Identity
- SoundCloudidentified by its domain in a verified breach record
- Records affected
- 29,815,722 records
- Data exposed
- Avatars, Email addresses, Geographic locations, Names, Profile statistics, Usernames
- Sector
- Not recorded
- Occurred
- 2025-12-15
- Disclosed
- 2026-01-27
- First recorded here
- 2026-09-09
Fastnexa security experts
Worried the same could happen to your company?
If you are a customer or supplier of SoundCloud, or work in the same industry, a Fastnexa security expert can tell you what this means for your data and test whether the same attack would work on you.
Think you’ve already been hit? Don’t wait on a form: call or WhatsApp +1 (732) 454 2616. We reply within 1 hour, 24/7. Emergency help →
Sources (1)
One source so far.
- Have I Been Pwned ↗First reported
2026-01-27