Mixcloud

Mixcloud is an online audio streaming platform headquartered in the United Kingdom. The service enables users to upload, share, and discover a variety of audio content, including DJ mixes, podcasts, and radio shows. It operates as a web‑based platform with accompanying mobile applications for iOS and Android devices. Content on Mixcloud is primarily user‑generated, allowing creators to reach listeners without the need for traditional broadcasting infrastructure. The platform provides streaming access to its catalog through a freemium model, offering both free listening and premium subscription options. Mixcloud’s headquarters in the UK places it under the jurisdiction of the European Union’s General Data Protection Regulation (GDPR).

In November 2019, Mixcloud experienced a security breach that exposed approximately 21 million user records. The compromised data included usernames, email addresses, SHA‑2 hashed passwords, account sign‑up and last‑login timestamps, country information, IP addresses, and links to profile photos. The stolen dataset was subsequently offered for sale on a dark‑web marketplace for around $4,000, and its authenticity was verified by matching email addresses against Mixcloud’s sign‑up system. Because the company is subject to GDPR, the breach potentially exposed it to regulatory fines of up to four percent of its annual turnover. Mixcloud’s initial response consisted of a brief boilerplate statement that did not confirm whether it would notify data‑protection authorities or detail specific remedial actions. The incident was linked to a known dark‑web seller who had previously been responsible for other high‑profile data leaks, highlighting a recurring threat actor in the ecosystem.