Breaking News

Hacker claims to leak WIRED subscriber database with 2.3 million records

by VARINDIA 2025-12-30

A threat actor has claimed responsibility for leaking a large database allegedly belonging to Condé Nast’s WIRED, exposing what is said to be more than 2.3 million subscriber records. The individual has also warned that tens of millions of additional records tied to other Condé Nast publications could be released in the coming weeks.

The hacker, operating under the alias “Lovely,” published the data on multiple hacking forums on December 20, offering access in exchange for a small amount of forum credits. In accompanying posts, the individual accused Condé Nast of ignoring repeated vulnerability disclosures and failing to adequately protect user data.

Leaked Data Linked to Multiple Condé Nast Properties

According to the hacker, the breach extends beyond WIRED and includes subscriber information connected to other well-known Condé Nast brands, based on abbreviated identifiers. These reportedly include publications such as The New Yorker, Vogue, Vanity Fair, GQ, Architectural Digest, Condé Nast Traveler, and several lifestyle and fashion titles.

Condé Nast has not publicly confirmed a breach. However, an independent review of the leaked dataset found evidence supporting the authenticity of at least some of the records. Analysts were able to verify a sample of entries as belonging to legitimate WIRED subscribers.

The dataset reportedly contains approximately 2.36 million records, each linked to a unique email address. The records span several decades, with timestamps ranging from the mid-1990s through September 2025.

Subscriber Details and Verification Findings

While many of the database fields appear incomplete, some records contain personal details such as names, phone numbers, mailing addresses, dates of birth, and gender. A smaller subset includes more comprehensive profiles with multiple personal identifiers present.

Cybersecurity researchers also corroborated the authenticity of the dataset by matching some of the leaked email addresses with previously compromised credentials found in infostealer malware logs, lending further credibility to the breach claims.

The leaked data has since been indexed by breach-monitoring services, enabling users to check whether their email addresses were potentially exposed.

Prior to releasing the data publicly, the hacker reportedly claimed to be attempting responsible disclosure and sought assistance in contacting Condé Nast’s security team. However, third-party intermediaries later concluded that the actor had misrepresented their intentions and proceeded with the leak after failing to receive a response. Condé Nast has not responded to requests for comment regarding the alleged breach or the scope of the exposed data.