For those being notified or first learning about the #WIRED #databreach:
On December 25, I broke the story of how I had been contacted in November by "Lovely," who claimed to have discovered a vulnerability. They asked for help getting Condé Nast to respond to them. They claimed they were not seeking any bounty or payment and had only downloaded a few profiles as proof.
They showed me my own data.
Trying to help, I reached out to Condé Nast corporate as well as to a contact at #WIRED.
Condé Nast never responded to me -- or to "Lovely" who eventually showed their true colors as someone trying to extort Condé Nast.
Do they have more data? Yes, it appears they do.
Troy Hunt (npub12zf…9xlm) verified the data leak and #HIBP has been notifying its affected subscribers.
Read more details in my blog post at https://databreaches.net/2025/12/25/conde-nast-gets-hacked-and-databreaches-gets-played-christmas-lump-of-coal-edition/
Zack Whittaker (npub1p5z…krfz) Catalin Cimpanu (npub1s69…rmen) Graham Cluley (npub1kcf…r43y) Mathew J. Schwartz (npub1neu…ycl9) Valéry Rieß-Marchive :verified: (npub1u8y…uh6d)
#databreach #dataleak #infosec #cybersecurity #incidentresponse #CondeNast
Dissent Doe :cupofcoffee:
npub17l…k4kr3
2025-12-28 17:27:47 UTC
Author Public Key
npub17l5x90j8qck2eeyjdqhshha8lp6vyq6vh3w7v5qp2gcfzhsma0lshk4kr3Seen on
wss://relay.momostr.pinkPublished at
2025-12-28 17:27:47 UTCEvent JSON
{
"id": "d5631b43bdae2240d6711cfb7ab3bc98bf6e777719c89c84b6c5d5bd92dd87e3",
"pubkey": "f7e862be47062cace492682f0bdfa7f874c2034cbc5de650015230915e1bebff",
"created_at": 1766942867,
"kind": 1,
"tags": [
[
"p",
"0d05fcbc368e873c322780f81e96fd2130cc54fd9ddeb2a4c85425cbefc971d4"
],
[
"t",
"wired"
],
[
"proxy",
"https://infosec.exchange/@PogoWasRight/115798367783923045",
"web"
],
[
"p",
"b613c1a8fbe10b33fe34edb551ceef2cccdf760a651b03a4468adc4c99a19d1c"
],
[
"t",
"cybersecurity"
],
[
"t",
"hibp"
],
[
"t",
"condenast"
],
[
"p",
"9e79fee4bdae14ec0b07c0d4dc56b997505571ff03e4512d1e3dd33d6d87ef12"
],
[
"t",
"dataleak"
],
[
"t",
"incidentresponse"
],
[
"t",
"infosec"
],
[
"p",
"868a45a1b5adcf4897a95cb07885383bb4e8d113d8012cea755381665b216bb1"
],
[
"t",
"databreach"
],
[
"p",
"e1c90d55b36cd984e5c1cf44903d3cd88ef4a375be5662ba24d6a50caed13e4d"
],
[
"p",
"50927f461b602a6da0ea36b53562d48cf30a3b75aabba1962afe10356a151ef5"
],
[
"proxy",
"https://infosec.exchange/users/PogoWasRight/statuses/115798367783923045",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/PogoWasRight/statuses/115798367783923045",
"pink.momostr"
],
[
"-"
]
],
"content": "For those being notified or first learning about the #WIRED #databreach: \n\nOn December 25, I broke the story of how I had been contacted in November by \"Lovely,\" who claimed to have discovered a vulnerability. They asked for help getting Condé Nast to respond to them. They claimed they were not seeking any bounty or payment and had only downloaded a few profiles as proof. \n\nThey showed me my own data. \n\nTrying to help, I reached out to Condé Nast corporate as well as to a contact at #WIRED. \n\nCondé Nast never responded to me -- or to \"Lovely\" who eventually showed their true colors as someone trying to extort Condé Nast. \n\nDo they have more data? Yes, it appears they do. \n\nnostr:npub12zf873smvq4xmg82x66n2ck53nes5wm442a6r932lcgr26s4rm6sj99xlm verified the data leak and #HIBP has been notifying its affected subscribers. \n\nRead more details in my blog post at https://databreaches.net/2025/12/25/conde-nast-gets-hacked-and-databreaches-gets-played-christmas-lump-of-coal-edition/\n\nnostr:npub1p5zle0pk36rncv38srupa9hayycvc48anh0t9fxg2sjuhm7fw82q2tkrfz nostr:npub1s69ytgd44h8539aftjc83pfc8w6w35gnmqqje6n42wqkvkepdwcs7mrmen nostr:npub1kcfur28muy9n8l35ak64rnh09nxd7as2v5ds8fzx3twyexdpn5wqt6r43y nostr:npub1neulae9a4c2wczc8cr2dc44ejag92u0lq0j9ztg78hfn6mv8aufq3lycl9 nostr:npub1u8ys64dndnvcfewpeazfq0fumz80fgm4hetx9w3y66jsetk38exs2muh6d \n\n#databreach #dataleak #infosec #cybersecurity #incidentresponse #CondeNast",
"sig": "dd8f39b97e62424f1ad7ebdeb538e8b50e1dae4d29d05b1f15f9057d0b753b43329bdbce4bc0154ef73fa76d2dcfb84ae2fccf806c872457ad105244b7854e59"
}