Hacker Claims Theft of 40 Million Condé Nast Records After Wired Data Leak

A security week report says a hacker known as Lovely leaked millions of Wired subscriber records and then claimed to have obtained more than 40 million additional records from Condé Nast, the parent company of magazines such as Vogue and The New Yorker. The publicly released Wired data comprises 2.3 million records, with the leaked contents including names, email addresses, display names, dates of birth, physical addresses, phone numbers, and genders, though email addresses appear in all records.

According to Hudson Rock, which analysed the leak, the attacker may have exploited insecure direct object reference flaws and broken access controls to view and alter data, and the Wired data has been added to Have I Been Pwned. After the Wired leak, Lovely threatened to release the Condé Nast records “over the next few weeks.” The article is dated 29 December 2025 and notes that the most recent Wired entries extend to September 2025.