Data Breach Exposes 18 Lakh Adda Users' Info

A significant data breach has recently come to light, impacting over 18 lakh users of Adda, a widely used society management app in India. The hacker, operating under the alias 'Blinkers', has claimed responsibility for circulating this vast database containing sensitive information relating to the app's users.

The data breach, which reportedly occurred back in March 2025, involved the uploading of personal details to a well-known hacking forum. This exposed critical data such as user names, phone numbers, email addresses, and hashed passwords, posing serious risks to individuals’ privacy and security.

As the data was shared among underground cybercrime communities, concerns are growing about the potential misuse of this information. Cybercriminals could leverage these details to launch phishing attacks or employ other malicious tactics, such as credential stuffing, where stolen credentials from one platform are used to access accounts on others.

This breach comes at a crucial time when India is making strides in establishing a robust data protection framework. The Ministry of Electronics and Information Technology (MeitY) has recently notified the Digital Personal Data Protection (DPDP) Rules, 2025, aiming to provide citizens with better safeguards for their personal information. However, many of these provisions won't be fully operational for another 18 months, leaving users vulnerable in the interim.

Under the new DPDP Act, personal data is strictly defined, and the unauthorized processing of such data is categorized as a personal data breach. This incident highlights the urgent need for stricter compliance and more effective data protection measures in the country.

Adda, originally founded in 2009 as Apartment Adda, has grown significantly, serving over 3,500 communities across countries such as the US and Singapore. The app facilitates various management tasks for residential societies, including visitor tracking and community notices. Its widespread use, especially during the COVID-19 pandemic, raises questions about the balance between convenience and the risks associated with data privacy.

While these applications offer useful features, privacy experts warn of potential surveillance and misuse of data. The Internet Freedom Foundation has highlighted that such platforms, despite claiming to adhere to stringent security standards, may inadvertently contribute to a culture of surveillance within communities.

In light of this recent breach, users of Adda and similar apps are advised to be vigilant about their data security. It is essential to adopt best practices for online safety and to stay informed about the implications of such breaches as the country moves towards a more defined data protection landscape.