2026 Wise — forum claim of ~4.9M records sale (Spain users, unverified)
Data compromised
Alleged names, dates of birth, gender, contact details, and Spanish NIF (tax/ID numbers) per Cybernews sample review of forum listing
Technical writeup
UNVERIFIED ACTOR CLAIM — not company-confirmed. On June 11, 2026 Cybernews reported that a threat actor advertised roughly 4.9 million Wise customer records for sale on an underground forum, primarily tied to Spanish users. Cybernews researchers reviewed 17 sample records attached to the listing and found fields including names, dates of birth, gender, contact details, and Spanish NIF numbers; timestamps in samples ranged from late 2025 into early 2026, suggesting recent exfiltration rather than repackaged old dumps per the outlet. Cybernews explicitly stated the scale remains unverified and that Wise had not responded at publication time. BreachHistory catalogs this as an unverified forum marketing claim with recordsAffected set to 0 until Wise or a regulator attests a victim count. Distinct from Wise's verified June 2024 Evolve Bank partner breach (wise2024).
Root cause
Criminal forum database-sale claim (unverified)