ransomnews.com Condé Nast User Data Breach: 32.8 Million Records for Sale
Article Content
- •32.8 million Condé Nast user records are for sale for $15,000.
- •Ransomnews confirmed the authenticity of a sample of the data.
- •Condé Nast has not commented on the breach or the sale.
On September 7, 2026, a database containing 32,815,767 user records from Condé Nast was listed for sale on a Russian-language hacker forum for $15,000. The data, reportedly collected between September and October 2025, includes unique email addresses, names, postal addresses, gender, birthdays, and phone numbers, but no passwords or payment information. Ransomnews verified a sample of 5,000 records, confirming their authenticity and linking the dataset to a previous leak involving WIRED. Condé Nast has not publicly acknowledged the breach or the sale. The seller claims to have removed WIRED records from this dataset, suggesting a connection to the December 2025 leak. The implications of this breach raise concerns over potential phishing and fraud targeting affected users.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Condé Nast in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host… 
Critical SQL Injection Zero-Day in Arista VeloCloud Orchestrator Exploited Arista Networks has patched a critical zero-day vulnerability (CVE-2026-114625) in its VeloCloud Orchestrator (VCO) that is actively being exploited. The flaw allows authenticated users, even those with basic privileges, to escalate their access to superuser status via a low-complexity SQL injection attack. This…