Truecaller, ToonDoo and others fall victim of data leaks.

A total of 38 breach events were found and analysed resulting in 40,402,675 exposed accounts containing a total of 18 different data types of personal datum . The breaches found publicly and freely available included Truecaller, ToonDoo, 2 Games, Stronghold Kingdoms and Shadi. Sign in to view the full library of breach events which includes, where available, reference articles relating to each breach.

Data Breach Analysis

Truecaller, a widely used caller ID and spam-blocking app, has experienced data exposure events in the past. Given its integration with mobile contact lists, Truecaller data poses a high privacy risk, especially in regions where it is heavily used.

ToonDoo, a comic-creation tool, was breached in a 2019 incident. Although not financial in nature, the breach still presents a significant risk due to password reuse.

2Games, a gaming portal, and Stronghold Kingdoms, an online medieval strategy games, are frequent breach targets due to their stored value and reuse of credentials across platforms.

Shadi, a matchmaking service, raises particular privacy concerns, as breaches in such platforms can expose sensitive personal and cultural data. Leaked data is not only sensitive but can also lead to reputational or personal harm if misused.

The variety of platforms and the breadth of personal data types make this batch of breaches particularly notable. The presence of detailed identifiers, behavioural data, and sensitive profile information increases the risk of targeted phishing, fraud, impersonation, and other forms of abuse.

Anyone who has ever used the affected services should assume their data may be at risk. Proactive steps include updating old passwords, enabling two-factor authentication, removing inactive accounts, and monitoring personal or financial accounts for unusual activity.