Wanelo Data Breach
The Wanelo data breach affected 23,165,793 unique email addresses and related account data in December 2018. The verified scope includes email addresses, IP addresses, names, passwords, and physical addresses, but those fields should not be treated as joined for every user.
Exposed Data Types
5- Email addresses
- IP addresses
- Names
- Passwords
- Physical addresses
About This Breach
The original sale listing emphasized email addresses and passwords. About three million passwords were reportedly stored as MD5 hashes and the remainder as bcrypt. MD5 is unsuitable for modern password storage; bcrypt provides stronger resistance but still depends on its cost and password strength. Phone numbers, payment cards, bank data, birth dates, and identity documents are not confirmed fields for this incident.
A match means that the email address appears in the verified Wanelo dataset; it does not prove that a password was recovered or that name, address, and IP data appeared in the same row. Replace reused passwords, review recovery and active-session settings on the email account, and verify shopping requests through official channels.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
