Breach Record

Woflow

DISCLOSED 2026-03-04 · STOLEN CREDS · 447,593 RECORDS EXPOSED

In March 2026, the AI-driven merchant data platform Woflow was named as a victim by the ShinyHunters data extortion group. The group subsequently published tens of thousands of files allegedly obtained from the company, comprising more than 2TB of data. The trove included hundreds of thousands of email addresses, names, phone numbers and physical addresses, with the data...

The record

What we know

Disclosed

2026-03-04

Attack vector

Stolen Creds

Records exposed

447,593

Domain

woflow.com

Data classes exposed

Email addressesNamesPhone numbersPhysical addresses

Sources

Cited reporting

↗ Have I Been Pwned (2026-05-07)

Similar vector · recent

Other stolen creds breaches on file

This page is the permanent ColdRecon entry for the Woflow disclosure. It updates if new public reporting emerges. All tracked breaches →

Woflow just lived through this. Your next prospect doesn't have to.

ColdRecon turns every disclosed breach into a daily intelligence brief from the seller's seat — normalized to the factors that move a deal, written in the Handler's voice. Request clearance and the first lands tomorrow at 0600.

Request Clearance →