Wegow Live‑Music Marketplace Data Breach Exposes 45K Records

Data Breach Overview

In September 2025, the social live‑music platform Wegow reportedly suffered a data breach affecting approximately 45,600 unique users. The breach was claimed by the threat actor known as @888.

---

Where Was the Data Found?

Stolen data appears to have been made available via DarkForums.st. The leaked dataset includes a wide array of user and transaction details, such as:

• Purchase Reference
• Name and Surname
• Email Address
• Newsletter Subscriptions
• DNI (National ID)
• Ticket and Transaction IDs
• Price, QR Code
• Purchase Date & Status
• Seating (Row, Seat, Sector)
• Location (City, Administrative Division)
• Payment Method
• Access Code
• And possibly more

Sample entries provided show repeated purchase records with timestamps and ticket metadata for users in Madrid.

Company Data Breach History
No prior leaks associated with Wegow have been publicly reported. This appears to be the first known incident.

Impact and Risks

• Phishing/social engineering using detailed personal and purchase information
• Identity theft due to exposed DNI and ticketing data
• Ticket fraud via exposed access and QR codes
• Privacy concerns from tracked location and seating data

Recommendations for Users

• Change your Wegow password immediately
• Enable 2FA if available
• Use unique passwords for different accounts
• Monitor emails and ticket activity for anomalies
• Be alert to phishing attempts masquerading as event updates or support messages

What is InsecureWeb?

InsecureWeb is a Dark Web monitoring service that keeps track of recent data breaches and tracks their impact by monitoring the darkest places of the internet.

Our commitment lies in providing top-notch cybersecurity services to our clients. Through continuous monitoring of the dark web and advanced threat detection methodologies, we strive to identify potential breaches promptly, enabling swift response and mitigation efforts. With our state-of-the-art tools and expertise, we prioritize the confidentiality, integrity, and availability of our clients’ data.