Audio recordings leaked: what it means and what to do
Risk level: high. Can you change it: no. Found in 1 breaches in this directory.
What this data is
Recordings of your voice held by a company: support calls, voice messages, smart speaker clips, meeting audio or voice notes inside an app.
The risk on its own
Two things leak at once here: what you said, and how you sound. The contents of a support call often include account numbers, addresses and answers to security questions read aloud. The voice itself is now a usable biometric, because a short clean sample is enough to produce a convincing synthetic version of you.
The risk combined with other data
With your name and phone number, a cloned voice becomes a weapon aimed at the people who trust you. Relatives and colleagues verify by ear, and a panicked call in your voice defeats that instinct. Where a bank uses voice verification, the recording attacks the login itself.
How criminals use it
A relative receives a distressed call in your voice asking for money to be sent urgently.
A finance officer at your workplace is called by your cloned voice approving a payment.
Account numbers and security answers you read aloud to a support agent are lifted straight from the recording.
A bank that uses voice as a login is fooled, or you are left proving that the call was not you.
What to do now
Agree a spoken code word with family and with whoever approves payments at work, and use it for any urgent money request.
If your bank offers voice identification, phone them and ask for it to be switched off or backed by a second check.
Change any password or security answer you ever spoke aloud on a recorded call.
Ask the company to delete your call recordings and to confirm its retention period in writing.
Tell older relatives specifically that a voice on the phone is no longer proof of identity, and that they should hang up and call you back.
Frequently asked questions
How much of my voice does someone need to clone it?
Far less than people expect. A short clear sample is generally enough for current tools, and support calls provide minutes of clean audio.
Can I stop my voice being used?
You cannot recall the recording, so the defence is verification: a family code word, a callback rule, and a second approval step for payments.
Should I stop using phone banking?
No, but ask for voice identification to be turned off or paired with another check, and never approve a transfer on an inbound call.
Breach data sourced from Have I Been Pwned, used under CC BY 4.0. Additional breach metadata provided by XposedOrNot. DataExposed is an independent service and is not affiliated with or endorsed by either.