In March 2026, the AI-driven merchant data platform Woflow was named as a victim by the ShinyHunters data extortion group. The group subsequently published tens of thousands of files allegedly obtained from the company, comprising more than 2TB of data. The trove included hundreds of thousands of email addresses, names, phone numbers and physical addresses, with the data indicating it related to Woflow customers and, in turn, the customers of merchants using their platform.
Sponsored
Use a password manager to generate and store strong, unique passwords for all your accounts. 1Password helps protect your data with industry-leading security.
Affected Accounts:
447.6 thousand
Breach Occurred:
March 2026
Added to HIBP:
7 May 2026
If you haven’t already changed the password affected by this breach, do so immediately on every account where it was used.
Wherever 2FA is supported, add an extra layer of security to your account.
Sponsored
Use a password manager to generate and store strong, unique passwords for all your accounts. 1Password helps protect your data with industry-leading security.