Data breach

Woflow: a data breach

In March 2026, the AI-driven merchant data platform Woflow was named as a victim by the ShinyHunters data extortion group . The group subsequently published tens of thousands of files allegedly obtained from the company, comprising more than 2TB of data. The trove included hundreds of thousands of email addresses, names, phone numbers and physical addresses, with the data indicating it related to Woflow customers and, in turn, the customers of merchants using their platform.

The record

Organisation
Woflow →
Identity
Woflowidentified by its domain in a verified breach record
Records affected
447,593 records
Data exposed
Email addresses, Names, Phone numbers, Physical addresses
Sector
Not recorded
Occurred
2026-03-04
Disclosed
2026-05-07
First recorded here
2026-09-09

Fastnexa security experts

Worried the same could happen to your company?

If you are a customer or supplier of Woflow, or work in the same industry, a Fastnexa security expert can tell you what this means for your data and test whether the same attack would work on you.

Book a 30-min callWhatsApp us

Think you’ve already been hit? Don’t wait on a form: call or WhatsApp +1 (732) 454 2616. We reply within 1 hour, 24/7. Emergency help →

Sources (1)

One source so far.

  1. Have I Been Pwned ↗First reported

    2026-05-07