Condé Nast, a media and publishing company, experienced a data breach in December 2025. A hacker operating under the alias "Lovely" claimed responsibility, stating they directly scraped data from Condé Nast systems. The incident became public in late December 2025, and a subset of the exposed data, specifically from WIRED magazine users, was added to Have I Been Pwned on December 27, 2025.
The confirmed data types exposed include full names, email addresses, physical mailing addresses, phone numbers, subscriber/user IDs, account creation dates, and activity timestamps up to September 2025. Initially, approximately 2.3 million subscriber records were affected, with a threat to leak up to 40 million additional records from other Condé Nast publications. No SSN, payment card numbers, or medical data were reportedly included in the initial leak. Condé Nast has not issued a detailed public statement or official notification letters to affected users.
Details about data breaches can emerge over time, and notification processes may be delayed.