Knuddels.de

Knuddels.de is a German social network also known as Knuddels Chat, providing online chat and community services. It allows users to create profiles, engage in real-time messaging, and participate in themed chat rooms. The platform primarily targets German‑speaking users, offering a space for social interaction and entertainment. It operates as a web‑based service accessible via browsers and, where applicable, mobile applications.

In July 2018, a data breach compromised approximately 808,000 email addresses and over 1.8 million usernames stored in plain text on the platform. This exposure indicated the substantial scale of personal data the service handled at that time. Following the breach, the organization notified affected users and initiated mandatory password resets. The incident attracted the attention of German data protection authorities due to the volume of credentials revealed.

The breach resulted in the first GDPR sanction issued in Germany, with Knuddels.de fined €20,000 for failing to implement adequate data protection measures such as pseudonymization and encryption. Regulators cited the lack of sufficient technical and organizational safeguards as the basis for the penalty. Despite the fine, the organization's transparent communication, rapid corrective actions, and cooperative engagement with oversight bodies were noted as mitigating factors. These factors contributed to a reduction of the fine relative to the potential maximum under the GDPR framework.

The source material does not disclose any explicit information about the organization's ownership, parent company, or subsidiary structure. Consequently, details regarding its corporate hierarchy remain unspecified based on the available facts.

After the incident, Knuddels.de implemented immediate security enhancements, including stronger encryption and improved monitoring, to protect user data. The platform continues to operate as a chat‑focused social network serving primarily German‑speaking audiences. Its experience is frequently referenced as a case study illustrating the importance of proactive data protection compliance and breach response.