SoundCloud Data Breach

What happened

In December 2025, SoundCloud announced it had discovered unauthorised activity on its platform. The incident allowed an attacker to map publicly available SoundCloud profile data to email addresses for approximately 20% of its users. The impacted data included 30M unique email addresses, names, usernames, avatars, follower and following counts and, in some cases, the user’s country. The attackers later attempted to extort SoundCloud before publicly releasing the data the following month.

Exposed data

Recommended actions

• Watch for targeted phishing emails referencing SoundCloud — attackers weaponise breach data quickly.
• Check whether your email address appears in this breach on haveibeenpwned.com.