Truecaller India 285 Million Scraped Directory Data Leak Data Breach
In May 2019, security researchers discovered massive database dumps originating from large-scale API scraping and enumeration targeting caller identification platform Truecaller (True Software Scandinavia AB - truecaller.com) circulating across dark web forums.
Exposed Data Types
7- Phone numbers
- Names
- Email addresses
- Physical addresses
- Carriers
- Social connections
- Profile photos
About This Breach
The exposed repository comprises 2,434 distinct CSV databases categorized by Indian cellular circles, totaling 285,576,880 unique mobile records. The data classes include MSISDN mobile telephone numbers, contact legal names, associated email addresses, regional telecommunications carriers (Jio, Airtel, Vodafone Idea), city/state locations, spam probability metrics, social profile URLs, and AWS S3 hosted avatar images.
Because Truecaller indexes both registered app users and contacts synced from users' address books, this vast aggregate directory significantly compromises personal anonymity and empowers large-scale telemarketing abuse, robocall fraud, and social engineering attacks.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
