2025 Thermomix Rezeptwelt (Vorwerk) — forum breach; HIBP/XON ~3.12M members
Data compromised
Names, email and physical addresses, phone numbers, dates of birth, usernames, bios/cooking preferences (HIBP); German subset previously cited ~1M+
Technical writeup
Company-acknowledged Thermomix Rezeptwelt (recipe world) forum incident — Vorwerk disclosed a misconfiguration at an external provider around Jan 30–Feb 3, 2025. Early German press focused on ~1M+ German users; Have I Been Pwned indexes the full Thermomix Recipe World Forum corpus at ~3.1M (names, emails, phones, addresses, DOBs, usernames, bios). XposedOrNot H1 2026 lists ThermomixRecipeWorldForum at 3,124,587 (added Mar 16, 2026). Cookidoo and other Thermomix product systems reported unaffected. Catalog recordsAffected updated from 1M German floor to 3124587 HIBP/XON census; companyConfirmed true for the Rezeptwelt incident.
Root cause
Security misconfiguration at external service provider (Jan 30–Feb 3 2025 window per Vorwerk/trade press)
References
- https://haveibeenpwned.com/Breach/Thermomix
- https://www.presseportal.de/pm/52621/5965724
- https://www.heise.de/news/Datenleck-bei-Thermomix-Daten-von-1-Million-deutscher-Nutzer-im-Darknet-10273696.html
- https://www.bitdefender.com/en-us/blog/hotforsecurity/data-breach-at-thermomix-recipe-forum-exposes-profile-information-of-3-3-million-users
- https://blog.xposedornot.com/h1-2026-breach-report/