Massive ADDA.io Data Breach: 1.8 Million Users Exposed on Hacker Forum
A threat actor using the alias "Blinkers" has posted what appears to be a massive data leak involving ADDA.io, a widely used society management platform, to a popular hacking forum. The leak, which reportedly includes the personal details of over 1.86 million users, surfaced late Sunday night and is already being circulated in underground cybercrime communities.
What is ADDA.io?
ADDA.io is a digital platform used by residential communities—including apartments, condos, and gated societies—for managing operations like communication, payments, and community notices. It’s widely adopted across several regions for its streamlined approach to community engagement and accounting.
The stolen data includes:
- Owner ID
- First and Last Names
- Phone Numbers
- Email Addresses
- Passwords (hashed with redundant MD5 hashing algorithm)
The Breach Details
The compressed archive is 70.1 MB, and uncompressed, it expands to 145 MB, suggesting a significant trove of personal data.
Blinkers, who holds an “MVP User” status on the forum with over 300 reputation points, claims the breach was pulled in March 2025, making it a fresh incident with potentially still relevant data.
ADDA.io has not yet released an official statement regarding the alleged breach.
The Dangers Ahead
If verified, this breach could expose ADDA users to a host of risks, including:
- Phishing attacks leveraging personal info like names and phone numbers.
- Credential stuffing due to leaked passwords, especially if reused across platforms.
- Privacy violations at a community level—particularly concerning for gated societies.
What Should Users Do?
If you are an ADDA.io user:
- Change your password immediately, especially if you use the same credentials elsewhere.
- Monitor your email and phone for suspicious messages or phishing attempts.
- Consider enabling two-factor authentication (2FA) if available.
This incident once again underscores the need for strong cybersecurity practices—not only by users but also by service providers entrusted with sensitive data.
Check if your account data has been exposed in this data breach with our Account Leak Checker.