WIRED data breach: 2.4M accounts exposed
Severity: medium · Patch status: no-fix-needed · Since 2025-12-27
In December 2025, 2.3M records of WIRED magazine users allegedly obtained from parent company Condé Nast were published online. The most recent data dated back to the previous September and exposed email addresses and display names, as well as, for a small number of users, their name, phone number, date of birth, gender, and geographic location or full physical address. The WIRED data allegedly represents a subset of Condé Nast brands the hacker also claims to have obtained. Exposed data: dates of birth, display names, email addresses, genders, geographic locations, names, phone numbers, physical addresses. The breach dates from Sep 8, 2025; Have I Been Pwned loaded it on Dec 27, 2025.
What to do
- If you had a WIRED account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch