Live data from Hacker News

SoundCloud Data Breach Now on HaveIBeenPwned

haveibeenpwned.com

61–70 of 113 posts

Re: SoundCloud Data Breach Now on HaveIBeenPwned

#61
post #45

Earlier quoted context omitted.

I'm confused, where were scrapers/data brokers/Zoominfo etc. were getting email addresses for SoundCloud accounts?

They don’t. I’m confused why that info is valuable.

People pitching scammy “I can make you famous” services to aspiring musicians. Happens all the time, there’s a whole industry dedicated to it.

Re: SoundCloud Data Breach Now on HaveIBeenPwned

#62

I went through and deleted a bunch of accounts a while ago, SoundCloud being one of them. It looks like I don't show up in the breach. It's nice to know SoundCloud actually deleted my data, I'm never totally sure what happens on the backend.

In theory, it's a legal requirement based on GDPR and CCPA as well as many other new digital rights laws across Europe and many states in the USA. SoundCloud is probably big enough to do that correctly otherwise e.g. the GDPR penalty is a highish percentage of the company's total revenue which gives the laws a good amount of "teeth".

Re: SoundCloud Data Breach Now on HaveIBeenPwned

#63

Earlier quoted context omitted.

Importantly, 20% of the total userbase it seems: > In December 2025, SoundCloud announced it had discovered unauthorised activity on its platform. The incident allowed an attacker to map publicly available SoundCloud profile data to email addresses for approximately 20% of its users. The impacted data included 30M unique email addresses, names, usernames, avatars, follower and following counts and, in some cases, the…

Also, never give out a direct email address, always an alias.

and include a nonce. user+SoundCloud@gmail.com is obviously guessable. user+SoundCloudheuerue64@gmail.com ain't getting guessed.

Re: SoundCloud Data Breach Now on HaveIBeenPwned

#64
post #45

Earlier quoted context omitted.

I'm confused, where were scrapers/data brokers/Zoominfo etc. were getting email addresses for SoundCloud accounts?

They don’t. I’m confused why that info is valuable.

Let's say you have a $SOCIETAL_TABOO streak and let it out via a soundcloud account that isn't identifiable as you without your email.

Now it is.

Now I can blackmail you or haunt you.

(I'm sure there's other examples, tl;dr people are deanonymized, there are uncountable reasons why people choose anonymity)

> The data in the leak (other than follower count, etc) was already available for purchase from Zoominfo, 8sense, or a variety of other data brokers or other legal marketplaces for PII.

?

Re: SoundCloud Data Breach Now on HaveIBeenPwned

#65
post #30

Earlier quoted context omitted.

Lil B is probably fine, but he is the biggest name I recall coming out of SoundCloud. He blew up all over the 2010s, he was the Kanye of Cloudrap too because he took dressing styles and changed it all up similar to Kanye.

Shout out to lil b and those parties at Berkeley he would perform at in ‘12, ‘13. Those were the golden sound cloud years.

I was big on tumblr, but he wasn't my style of rap, but I respect him for what he was able to pull off.

Re: SoundCloud Data Breach Now on HaveIBeenPwned

#66
post #6

SoundCloud is the worst company, so hostile to former paying users! I am a hobbyist songwriter and have posted my rough mixes (Apple's Music Memo app which adds drum and bass automagically with two clicks & then mix it in Garage Band) on my SoundCloud for more then ten years. I signed up for their Artist Pro account and was a member for of such consistently for a few years at $17 a month. Once you cancel they then ho…

SoundCloud used to be good prior to the redesign. Recently I decided to evaluate it for serious use and start posting there again, only until their new uploader told me I need to switch to a paid plan, even though I triple-checked I was well within free limits and under my old now unused username I uploaded a lot more (mostly of experimental things I am not that proud of anymore). It looks like their microservices ar…

This sounds like a classic consistency vs latency trade-off. Enforcing strict quotas across distributed services usually requires coordination that kills performance. They likely rely on asynchronous counters that drift, meaning the frontend check passes but the backend reconciliation fails later. It is surprisingly hard to solve this without making the uploader feel sluggish.

Re: SoundCloud Data Breach Now on HaveIBeenPwned

#67

I went through and deleted a bunch of accounts a while ago, SoundCloud being one of them. It looks like I don't show up in the breach. It's nice to know SoundCloud actually deleted my data, I'm never totally sure what happens on the backend.

Only 20% of accounts were breached, so that's an optimistic conclusion.

Re: SoundCloud Data Breach Now on HaveIBeenPwned

#68

I went through and deleted a bunch of accounts a while ago, SoundCloud being one of them. It looks like I don't show up in the breach. It's nice to know SoundCloud actually deleted my data, I'm never totally sure what happens on the backend.

For some services, like Anthropic/Claude's stubborn refusal to let you remove your payment method, deleting isn't even an option.

Re: SoundCloud Data Breach Now on HaveIBeenPwned

#69

Earlier quoted context omitted.

You can export your entire profile using yt-dlp. Of course you have to do it, when you are still a paying customer.

Why would someone that writes their own songs, mixes in GarageBand, uploads to a 3rd party website need to use yt-dlp to get back the files that they themselves made? Yes, I'm intentionally victim blaming here. The victim is complaining about a 3rd party site deleting files. Who cares? Why would you have as your only source of your files the copies stored by the 3rd party?

Date of publication (copyright) is important to a songwriter. Soundcloud im sure knows this! Probably should have said this from the top!

Re: SoundCloud Data Breach Now on HaveIBeenPwned

#70

SoundCloud is the worst company, so hostile to former paying users! I am a hobbyist songwriter and have posted my rough mixes (Apple's Music Memo app which adds drum and bass automagically with two clicks & then mix it in Garage Band) on my SoundCloud for more then ten years. I signed up for their Artist Pro account and was a member for of such consistently for a few years at $17 a month. Once you cancel they then ho…

You mean you never kept your originals but just uploaded and deleted the masters?

Date of publication (copyright) is important to a songwriter even if there are a hobbyist.
Post reply on HN