WIRED wired.com WIRED data breach: what happened and what to do
In December 2025, 2,364,431 WIRED user records allegedly taken from parent company Condé Nast were published online. All had emails and display names. A small number also had names, phone numbers, birth dates or full addresses. The data dates to September 2025.
View all 13,115 breaches- Breach date
- 8 Sept 2025
- Made public
- 27 Dec 2025
- Affected
- 2,364,431
- Data exposed
- Dates of birth, Display names, Email addresses, Genders, Geographic locations, Names, Phone numbers, Physical addresses
- Verified
- Yes
- Last updated
Source: Have I Been Pwned (CC BY 4.0)
WIRED is a technology magazine, and in December 2025 data from its user accounts was published online. The leak is notable partly because of where it allegedly came from: WIRED's parent company, Condé Nast.
What happened
According to Have I Been Pwned, 2,364,431 records of WIRED users were allegedly obtained from Condé Nast and published online in December 2025. The most recent data in the leak dated back to September 2025, and Have I Been Pwned dates the breach to 8 September 2025. It added the data to its service on 27 December 2025.
The word "allegedly" matters here. Condé Nast hadn't been shown to have confirmed the origin, and databreaches.net, which covered the story, took a sceptical line on the hacker's claims. Have I Been Pwned also says the WIRED data allegedly represents only a subset of the Condé Nast brands the hacker claims to have obtained. So other Condé Nast titles may be affected too, though that isn't established.
What was exposed
Every record held an email address and a display name. For a small number of users the data went further: their name, phone number, date of birth, gender, and geographic location or full physical address.
For most people in this leak the exposure is limited to an email address and a screen name. That's still enough to land you on phishing lists, and to give a scammer something to write about: a message that says it's from a magazine you actually read is more believable.
For the small group whose records included a full address, phone number and birth date, the stakes are higher. That mix is what scammers use to impersonate someone, answer security questions or run a convincing phone scam.
Why the Condé Nast link matters
WIRED is one of several magazines under the Condé Nast umbrella, and accounts at those titles often share a login system. If the hacker's claim holds, anyone with an account at another Condé Nast brand has reason to be careful too, even though only the WIRED data is listed as leaked. If you ever got a message about this breach, go to the site yourself instead of clicking the link in it.
What this means for you
The data has no passwords in it, so there's nothing to reset because of this alone. If you subscribe to WIRED or another Condé Nast title, be careful with emails about your subscription, billing or account. Those are the most natural cover for phishing now.
If you're not sure whether your own record held more than an email address, assume it could have, and act on the steps below.
What to do if you were in it
- 1
Watch for phishing that mentions WIRED or subscriptions
Be careful with emails about billing, renewals or account problems. Go to the site directly instead of clicking.
- 2
Expect scam calls and texts if you gave a phone number
A small number of records included phone numbers and full addresses. Don't share codes or personal details with anyone who contacts you first.
- 3
Use a unique password on every account
The leak holds no passwords, but a password manager protects you from the next one. Change any reused password you know of.
- 4
Turn on two-factor authentication
Your email address is known to attackers now. Add an authenticator app or passkey to your email account first.
- 5
Check which breaches include your email
Run a free Serus scan to see whether your email or phone number appears in this and other breaches.
Frequently asked
Was I affected by the WIRED breach?
If you had a WIRED account, possibly. Have I Been Pwned lists 2,364,431 records, and you can search your email there or run a free Serus scan.
What was exposed in the WIRED breach?
Email addresses and display names for everyone. For a small number of users also names, phone numbers, dates of birth, genders and locations or full addresses.
Was the data really from Condé Nast?
Have I Been Pwned describes it as allegedly obtained from Condé Nast. The origin is a claim by the hacker, not something confirmed.
Should I change my password?
No passwords were listed in the leak. Change it if you reuse it elsewhere, and turn on two-factor authentication.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
