What Happened
In September 2025, the Spanish live-music platform Wegow suffered a data breach claimed by the threat actor @888, exposing records of approximately 45,600 unique users. The stolen data, leaked on DarkForums.st, included sensitive user and transaction details such as names, surnames, email addresses, DNI (National ID), purchase references, ticket and transaction IDs, prices, QR codes, purchase dates and statuses, seating information (row, seat, sector), event locations (e.g., Madrid), payment methods, access codes, and newsletter subscriptions. This was reportedly Wegow’s first known breach, posing risks like phishing, identity theft, ticket fraud, and privacy violations from location and seating data; users were advised to change passwords, enable 2FA, monitor accounts, and watch for phishing.
