WIRED Data Leak Exposes 2.3M Users Amid Broader Claims

In late December 2025 a threat actor known as "Lovely" posted a verified dump of approximately 2.3 million WIRED subscriber records on underground forums; researchers attribute the exposure to broken access controls/IDOR flaws in Condé Nast's shared identity platform, exposing emails, names, postal addresses and phone numbers (no passwords or payment card data reported). The actor claims access to a larger Condé Nast dataset affecting tens of millions, increasing risks of phishing, account takeover and doxing, and prompting recommendations for monitoring, credential hygiene and remediation of authorization flaws.