WIRED Data Leak Exposes 2.3M Users Amid Broader Claims

The WIRED data leak exposed the personal data of over 2.3 million WIRED subscribers, with the dataset appearing on underground forums in late December 2025. According to the security reports, a threat actor using the alias “Lovely” claimed responsibility, saying the data was released after vulnerability reports went unanswered and that datasets affecting more than 40 million Condé Nast users would be released in the coming weeks.

The leaked records include email addresses, full names, home addresses, phone numbers, and account metadata, though there is no evidence that passwords or payment card information were included. Researchers attribute the breach to broken access controls and IDOR vulnerabilities within Condé Nast’s centralized identity platform, which allowed bulk data extraction due to the shared account system across brands.

The incident has been indexed by Have I Been Pwned, underscoring the exposure of WIRED and potentially other Condé Nast platforms, and initial leak announcements were identified by SOCRadar on 20 December 2025.