2026 SoundCloud — 29.8M accounts (ShinyHunters)
Data compromised
Emails, usernames, avatars, follower counts, geographic data
Technical writeup
ShinyHunters breached SoundCloud via vishing and internal service dashboard access. Mapped email addresses to publicly available profile data. ~29.8M accounts exposed (~20% of user base). Data leaked Jan 2026; added to HIBP Jan 27. Exposed: emails, usernames, avatars, follower counts, geographic data. Passwords and payment card information were NOT compromised.
Root cause
Voice phishing; SSO compromise; internal dashboard exploit