SoundCloud
Disclosed Dec 15, 20259 months ago29,815,722 accountsConfirmed
SoundCloud breach exposes emails of about 28 million accounts
SoundCloud confirmed attackers accessed member data consisting of email addresses and public profile information, disrupting VPN access; BleepingComputer's sources put the impact at about 20% of users, roughly 28 million accounts, which SoundCloud later confirmed.
What is known
| People affected | 29,815,722 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Dec 15, 2025 |
| Happened | Dec 15, 2025 |
| Attack | Hacking |
| Data exposed | Emails, Location, Names, Other |
| Sector | Media · DE |
| Status | Confirmed |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| Have I Been Pwned: SoundCloudhaveibeenpwned.com · Aggregator | Aggregator |
| SoundCloud disclosuresoundcloud.com · The organization | The organization |
| Have I Been Pwned: SoundCloud data breach impacts 29.8 million accountsbleepingcomputer.com · News | News |
| SoundCloud confirms breach after member data stolen, VPN access disruptedbleepingcomputer.com · News | News |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Dec 15, 2025 | |
| Have I Been Pwnedaccounts in the data | Jan 27 | 29,815,722 |
History of this record
- 2026-09-25 · source_type: aggregator to press · seed source
- 2026-09-25 · source_url: https://haveibeenpwned.com/Breach/SoundCloud to https://www.bleepingcomputer.com/news/security/soundcloud-confirms-breach-after-member-data-stolen-vpn-access-disrupted/ · seed source
- 2026-09-25 · country: empty to DE · seed source
- 2026-09-25 · sector: tech to media · seed source
- 2026-09-25 · attack: extortion to hacking · seed source
- 2026-09-25 · data_types: ["emails","location","names"] to ["emails","location","names","other"] · seed source
- 2026-09-25 · disclosed: 2026-01-27 to 2025-12-15 · seed source
- 2026-09-25 · summary: In December 2025, SoundCloud announced it had discovered unauthorised activity on its platform . The incident allowed an attacker to map publicly available SoundCloud profile data to email addresses for approximately 20% of its users. The i to SoundCloud confirmed attackers accessed member data consisting of email addresses and public profile information, disrupting VPN access; BleepingComputer's sources put the impact at about 20% of users, roughly 28 million accounts, which Sou · seed source
- 2026-09-25 · title: empty to SoundCloud breach exposes emails of about 28 million accounts · seed source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Have I Been Pwned), confirmed by Company page. Record counts are as reported. Not legal advice.