32.8 million Condé Nast accounts, offered for $15,000

In December 2025 someone released 2,366,576 WIRED account records and said they had more than 40 million Condé Nast records behind them. The company never responded, and the claim sat unverified for nine months. The listing that appeared on 7 September 2026 answers most of it: 32,815,767 unique email addresses, with WIRED making up about 2.36 million of them and a separate offer for the 30,455,594 records from everywhere else. That makes the published WIRED set roughly 7% of the whole. The other 93%, which covers readers of the rest of the portfolio, has never been public, and it is the part that is new.

Condé Nast runs one account system across its titles, which is how a single database can hold readers of several magazines at once. Coverage of the sale names Vogue, The New Yorker, GQ, Glamour, Vanity Fair and WIRED, and the portfolio also includes titles such as Architectural Digest, Bon Appétit, Condé Nast Traveler and Allure. Nobody has published a breakdown by title, so it is not possible to say how many records belong to each. The practical rule is simple: if you created an account at any Condé Nast site before late October 2025, to read past a paywall, manage a subscription, comment or sign up for a newsletter, you may be in it.

Less than the headline number suggests, and more than an email address. Every record has an email; about one in three has a full name, about one in five has a postal address, and smaller shares carry gender, date of birth and phone number. The sample held no passwords and no payment details. That changes what the risk is. Nobody can sign in to your account with this, but anyone who buys it knows which magazines you read, and often where you live, which is everything a convincing renewal notice or “payment failed” email needs.

Only partly answerable. The WIRED records were published, so the known breach databases hold them, and a free check will tell you whether your email is among them. The other 30.5 million records have only been offered for sale. They are not indexed anywhere, and there is nothing to search. Condé Nast could tell you what it holds on you if you ask through its privacy request process, but it has not said which accounts were taken, and it may never send a notice, because contact details alone often fall below the threshold that US breach laws set for telling people.

Treat any email about your subscription as suspect for the next few months, and manage the subscription by typing the magazine’s address into your browser rather than clicking through. Check the WIRED part of the leak against your email. Close accounts at titles you no longer read, and send Condé Nast a deletion request for the rest if you do not need them. If you reused the Condé Nast password elsewhere, change it there anyway: the sample held no passwords, but nobody outside the sale has seen the full set. For future sign-ups, a separate or masked email address per subscription makes the next leak of this kind traceable and easy to cut off.

Magazine subscribers have been the target of fake renewal notices for decades: official-looking letters from third parties offering to renew at a high price, or bills for subscriptions that are not due. A list that pairs a reader’s email and postal address with the titles they read makes those notices easy to aim, by post and by email. Expect messages saying your payment failed, your subscription is about to lapse, or you have been chosen for a free issue, each with a link. The magazine will show your real renewal date inside your account. A letter or email that does not match it is not from them.

A name, email and home address sold in one place tend to end up everywhere: merged into marketing lists, then into people-search profiles that sit next to your phone number and relatives. That is the part of this you can still shrink, and it needs repeating, because listings return. Our post-breach guide covers the order of the other steps, and the WIRED breach page has the details of the part that was published in December.