Hackers claim leak of 141,000 Success Magazine users

A 100-year-old business magazine read by millions may have just had 141,000 subscriber records dumped onto a hacker forum.

SUCCESS Magazine, a US publication with a legacy spanning more than a century, is reportedly the latest brand to have its data circulate in underground forums.

The magazine has allegedly suffered a data breach exposing the personal and financial details of more than 141,000 readers.

The incident came to light after a threat actor uploaded what they claim is the platform’s database to a well-known hacker forum and offered it for public download. According to the post, the allegedly compromised data includes extensive customer profiles and store order details.

According to the magazine’s advertising materials, its content reaches more than 5 million readers each month across its digital platforms. The magazine’s print edition reportedly circulates to more than 500,000 readers monthly.

What data may have been exposed

In the post, the attacker included two sample records to demonstrate the authenticity of the data.

Cybernews researchers reviewed those samples and confirmed the presence of structured customer information. The data points visible in the data samples include:

• Full names
• Email addresses
• Phone numbers
• Physical addresses
• Subscription details – plans purchased and prices

However, at this point, it remains unclear how and when the attackers obtained the database. The question also remains whether the compromise even occurred in the first place, as it is not uncommon for cybercriminals to circulate old or false data.

If confirmed, the exposure could provide attackers with enough information to launch targeted fraud or phishing campaigns.

Having readers' names, emails, and phone numbers is extremely useful, as attackers can combine them with subscription details to craft fake emails impersonating Success magazine.

“Exposure of personally identifiable information often leads to risks, including fraud attempts and social engineering targeting affected individuals,” our research team commented.

Another cyber incident?

Three days ago, the company circulated a message that its website and email systems had been breached by an unauthorized third party.

“As a result, content was published and distributed that does not reflect who we are, what we stand for, or the values at the heart of SUCCESS,” the company wrote.

At this point, it is unknown if these are separate incidents or part of the same attack. Cybernews has contacted SUCCESS Magazine for comment regarding the alleged breach, but has not received a response at the time of publication.

The media is not immune to cyber incidents

It’s not the first time big names in the media industry have succumbed to cybersecurity incidents. In 2024, the Rhysida ransomware gang claimed The Washington Times and demanded 5 bitcoin in exchange for not leaking the stolen data.

And Cybernews in-house research previously uncovered that a multinational media conglomerate, Thomson Reuters, left an open database with sensitive customer and corporate data, including third-party server passwords in plaintext format.