Hackers Claim Breach of WIRED Database Containing 2.3 million Subscriber Records

A threat actor known as “Lovely” leaked a WIRED subscriber database containing roughly 2.3 million email addresses and hundreds of thousands of associated names, addresses, and phone numbers, and threatened to release up to 40 million more records from Condé Nast brands. The leak—validated against RedLine and Raccoon infostealer logs—was enabled by Insecure Direct Object References and broken access controls on Condé Nast’s centralized identity platform, exposing PII that raises phishing, doxing, and account takeover risks despite no passwords or payment data in the initial dump.