Gaadi 2015 Data Breach

The current a public breach source record reports 4,261,179 unique email identifiers and lists emails, genders, geographic locations, IP addresses, names, passwords, phone numbers, and usernames. A public breach source says passwords appeared in both plaintext and MD5 form. May 14 is the catalogue date, not an exact access, exfiltration, or publication day.

LeakData's live local index contains 4,253,404 unique email relations, 7,775 below the public breach source measure. Dataset version, normalization, duplicate, blank, and rejected-value differences remain unreconciled; no count was fitted to another. The completed historical job records 4,253,404 lines as valid and imported emails and has an error count of zero, but the duplicateRecords field is absent from the job document, so a zero duplicate count was not assumed.

A fresh live Mongo export produced 4,253,404 lines and 98,112,742 bytes. The sorted unique set has the same line and byte counts, independently confirming that the current live relations contain no duplicates. Two current compiled validators agree on 4,252,216 strict-valid and 1,188 legacy-format relations. Of the legacy-format group, 512 fail the current ASCII local-part character rule and 676 fail the top-level-domain character rule. These pre-existing indexed relations were not deleted, repaired, or re-imported.

The original normalized job file is no longer present on disk; there is no input manifest or source SHA-256 record, and backup status is skipped. The DHT working copy contains only the final 7,081,961 bytes of a 334,509,577-byte 7z archive; the first 327,427,616 bytes and 7-Zip start header are unavailable. The Gaadi tail, the next four complete files, and the beginning of GameSalad match three consecutive 32 MiB torrent pieces against the metainfo SHA-1 values. This proves byte position only. Member inventory, source email column, archive-to-job identity, and possible supplemental scope cannot be established, so no new or gap-filling import was performed.

Local search contains email relations only; the genders, locations, IPs, names, passwords, phones, and usernames reported by a public breach source are not locally searchable. A private result does not establish account ownership, identity, vehicle use or purchase, field co-occurrence, password form, compromise, or misuse. Because plaintext or weak MD5 passwords create risk, a known old password should be changed only where it was genuinely reused elsewhere. gaadi.com now redirects to CarDekho; that current redirect was not used as confirmation of the 2015 incident or historical operator responsibility.