Hackers breached SoundCloud's ancillary service dashboard and accessed personal and contact information from 29.8 million user accounts (approximately 20% of all SoundCloud users). The compromised data included email addresses, geographic locations, names, usernames, profile statistics, avatars, follower and following counts, and in some cases, the user's country. The breach was discovered in December 2024 and confirmed on December 15. No sensitive data such as financial or password data was accessed. The attackers were able to map publicly available SoundCloud profile data to email addresses. Users experienced 403 'Forbidden' errors when connecting via VPN during the incident.