ConfirmedData breach

Raaga: a data breach

In December 2025, data allegedly breached from the Indian streaming music service "Raaga" was posted for sale to a popular hacking forum . The data contained 10M unique email addresses along with names, genders, ages (in some cases, full date of birth), postcodes and passwords stored as unsalted MD5 hashes.

The record

Organisation
Raaga
Identity
Raagaidentified by its domain in a verified breach record
Records affected
10,225,145 records
Data exposed
Ages, Dates of birth, Email addresses, Genders, Geographic locations, Names, Passwords
Sector
Not recorded
Occurred
2025-12-15
Disclosed
2026-01-19
First recorded here
2026-09-09

Sources (1)

One source so far.

  1. Have I Been PwnedFirst reported

    2026-01-19