SoundCloud Data Breach Exposes 29.8 Million Personal users Details

In December 2025 SoundCloud disclosed a major data breach affecting about 29.8–30 million user accounts (~20% of its user base). Exposed data included email addresses, usernames, display names, avatars, follower counts and sometimes country; no passwords or payment data were reported stolen. The attackers appear to have used a flaw enabling bulk extraction (or credential compromise), demanded payment for non-disclosure, and ultimately released the data publicly, elevating phishing, credential-stuffing, and account-takeover risks for affected users.