Thermomix ‘Recipe World’ Forum Experiences Data Breach, Exposing 3.1 Million Accounts

• The Thermomix Rezeptwelt forum was targeted by a cyberattack that leaked the personal details of millions of users.
• Only the German website has been impacted by this incident, which exposed names, emails, phone numbers, and physical addresses.
• Yet, the data set does not feature forum user passwords and financial details.

The Rezeptwelt forum, a popular online community for Thermomix owners, has fallen victim to a significant data breach that compromised the personal details of over 3.1 million registered users. 

Hackers infiltrated the German Rezeptwelt platform, exposing the private information of its users. Compromised data includes the following:  

• Names  
• Email addresses  
• Physical addresses  
• Phone numbers  
• Dates of birth  
• Usernames  
• Bios (often cooking-related) 

The breach impacted 3,123,439 Rezeptwelt.de user accounts, making it one of the more significant cybersecurity incidents involving specialized online communities. Thermomix, Cookidoo, the Vorwerk web shops, and other platforms were not affected.

An official release revealed the security lapse owes to unauthorized third-party access to a subordinate server of one of the company’s external service providers, which allowed access to some users’ profile data but not to passwords or financial data. It also mentioned notifying all affected users.

The breach occurred on January 30, 2025, and has been attributed to "[email protected]," reportedly the individual responsible for providing the compromised records to Have I Been Pwned (HIBP)—a trusted online repository for data breach notifications. The data was added to HIBP on February 6, 2025.

The name tied to the leak, "[email protected]," references the XMPP.JP platform, a free public messaging service known for offering end-to-end encryption via OTR and OMEMO protocols. While the connection to XMPP.JP remains unclear beyond the alias, the presence of secure communication technology raises speculation about the possible methods used to acquire and transmit the leaked data.  

Users connected to the forum are urged to take immediate action to protect their personal information.

In other news, a critical security flaw in the infrastructure of the Chinese AI startup DeepSeek publicly exposed private data, and a ransomware attack affected 5.6 million patients of Healthcare Giant Ascension.