2026 Wrappiness — Satanic forum sale claim; 3M order/user records (unverified)
Data compromised
Advertised (unverified): 3M user/order records + 115 admin accounts — names, emails, phones, billing/shipping addresses, purchase values, tracking numbers, personalization text; admin bcrypt hashes; no card PANs in published schema per DWI
Technical writeup
Unverified criminal-forum sale claim — August 20, 2026 (Dark Web Informer). Actor Satanic advertised the full database of Wrappiness.co (U.S. personalized-gift retailer), claiming three million user/order records and 115 administrator accounts from an August 18, 2026 intrusion, priced at $2,000. Published field lists include names, emails, phones, full billing and shipping addresses, order values, carrier tracking numbers, and personalization details; admin records include bcrypt password hashes and permission sets. DWI notes no card numbers in the published schema and that 3M may mix orders vs unique customers. Wrappiness had not publicly addressed the claim at indexing. recordsAffected 3000000 = actor headline (unverified).
Root cause
Unverified forum sale — actor Satanic claims Aug 18, 2026 intrusion into Wrappiness.co order DB; retailer had not confirmed