Hacker claims leak of 1.86 Mn Adda.io records

Housing-tech platform Adda.io is facing scrutiny after a hacker claimed to have leaked data of 1.86 million users, with a 145 MB database circulating on a hacker forum since November 23.

The dump, posted by a user identifying as Blinkers, is linked to an intrusion that allegedly occurred in March 2025, according to breach-monitoring platforms.

The leaked files reportedly contain owner IDs, names, phone numbers, email addresses and MD5-hashed passwords, raising concerns about targeted phishing and credential-stuffing attacks if the hashes are cracked.

Adda.io is used by thousands of housing societies across India for payments, billing, visitor tracking and facility management, making the scale of the claimed leak significant for users who rely on the platform for daily community operations.

The development coincides with India’s notification of the Digital Personal Data Protection Rules, 2025, which mandate stricter reporting and security obligations for platforms handling user information. Adda.io has not issued a public statement on the alleged breach, though the company has been approached for comment.

The incident is expected to increase scrutiny on the security posture of community-management apps and may prompt resident associations and individual users to review credentials and seek clarity on the extent of exposure.