AfD breach exposes 345,000 email addresses and messages
Original title: 345,000 email addresses stolen in cyberattack on Germany’s far-right party AfD
Have I Been Pwned added the September leak on October 27 as a sensitive breach, so only verified owners can search it.
More than 345,000 unique email addresses and messages from Germany’s Alternative für Deutschland (AfD) were added to Have I Been Pwned on October 27. AfD says a few mailboxes were copied and the data appeared on an activist website; journalist Lilith Wittmann reports entry through a poorly secured WordPress site, password changes, and a second intrusion days later. Leaked material reportedly includes state-branch member excerpts and unencrypted population-register records, including first-time voters.
Unconfirmed: The hackers’ account of the intrusion has not been confirmed by AfD or authorities, and notification timing is disputed.
- HIBP lists email addresses and messages and blocks public search.
- AfD says it informed mailbox owners and the data protection commissioner.
- Wittmann says Berlin received notice about two hours after the press release.
- Attackers reportedly returned on September 14 using leftover code.
- Registry data was emailed unencrypted and was supposed to be deleted within a month.
Impact: Exposure of party emails, member excerpts, and voter registry data
| Product | Affected |
|---|---|
| WordPress site at wahlkampf.afd.de | — |
- 1.Verified email owners can check the sensitive HIBP entry by signing in.
- 2.Organizations can search domains they control in HIBP.
- Products
- WordPress
- Victims
- Alternative für Deutschland
- Organizations
- Have I Been PwnedAlternita Dienstleistungs GmbH
- Countries
- Germany
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | wahlkampf.afd.de | attackers got in through a poorly secured WordPress site at wahlkampf.afd.de. From there they reached the mail management system, change |
From the original article
3 min read at helpnetsecurity.com
Over 345,000 unique email addresses were exposed in the September 2026 breach at German far-right political party Alternative für Deutschland (AfD). Breach notification service Have I Been Pwned (HIBP) added the data to its database on 27 October, listing email addresses and email messages as the compromised information. HIBP has flagged the incident as a sensitive breach, so the data cannot be searched publicly.
By Sinisa Markovic · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.