Condé Nast faces major data breach: 2.3M WIRED records leaked, 40M more at risk

A hacker known as “Lovely” claims to have leaked personal data for over 2.3 million Wired[.]com users, with a warning that up to 40 million more records across Condé Nast brands could follow, including The New Yorker, Vogue and Vanity Fair. The data purportedly appeared on the Breach Stars hacking forum on 20 December 2025, with a download link and file hash, and the attacker alleges Condé Nast ignored multiple security warnings before the breach.

The claim describes access to a centralized Condé Nast account system covering more than 40 million users, and notes that the leaked dataset includes full names, email addresses, user IDs, display names, account creation and update timestamps, and some last session dates, while stating that no passwords or payment information were exposed.

Hudson Rock co-founder Alon Gal said the leak’s authenticity was validated by matching Wired records with infostealer logs; the report also suggests a larger 40 million-record leak could be released. Have I Been Pwned lists the WIRED data as exposed, and the article notes risk of doxing, swatting, and highly targeted spear-phishing using Condé Nast brand context.