SongTrivia2

DISCLOSED 2026-04-02 · STOLEN CREDS · 291,739 RECORDS EXPOSED

In April 2026, the music trivia platform SongTrivia2 suffered a data breach that was subsequently published to a public hacking forum. The data contained a total of 291k unique email addresses sourced from either Google OAuth logins or accounts created on the site, the latter also containing bcrypt password hashes. The data also included names, usernames and avatars.

The record

What we know

Disclosed

2026-04-02

Attack vector

Stolen Creds

Records exposed

291,739

Domain

songtrivia2.io

Data classes exposed

Auth tokensAvatarsEmail addressesNamesPasswordsUsernames

Sources

Cited reporting

↗ Have I Been Pwned (2026-04-04)

Similar vector · recent

Other stolen creds breaches on file

This page is the permanent ColdRecon entry for the SongTrivia2 disclosure. It updates if new public reporting emerges. All tracked breaches →

SongTrivia2 just lived through this. Your next prospect doesn't have to.

ColdRecon turns every disclosed breach into a daily intelligence brief from the seller's seat — normalized to the factors that move a deal, written in the Handler's voice. Request clearance and the first lands tomorrow at 0600.

Request Clearance →