Wowhealth.com Database Breach – 423,649 Records Exposed

Data Breach Summary

A significant data breach has exposed the personal and professional information of 423,649 users from the Wowhealth.com database. The leak, attributed to threat actor @ghidra, was shared on darkforums.st in September 2025. Wowhealth.com is a healthcare platform launched in 2018, offering direct access to doctors, transparent pricing, and cost-sharing for routine and major medical needs.

The compromised dataset includes full names, email addresses, gender, languages spoken, NPI numbers, and medical credentials, among other sensitive fields. This breach underscores the growing risks faced by digital healthcare platforms in safeguarding user data.

---

Where and How?

The breach was made public on the dark web forum darkforums.st, where user @ghidra published the stolen Wowhealth.com database along with a message threatening to release more data if communications were ignored. The leak consists of a large combolist with medical professionals’ personal information, including internal metadata and credential identifiers.

The exposed data presents a serious risk of phishing, identity theft, and impersonation, especially given the medical and professional context of the information.

Company Data Breach History

Currently, there are no public reports or official records of previous data breaches involving Wowhealth.com. However, this incident reveals major vulnerabilities in the company’s cybersecurity framework and highlights the urgent need for enhanced protection of sensitive user data.

---

Further Action

Wowhealth.com is strongly urged to investigate the origin of the breach, reinforce its infrastructure security, and notify affected users transparently. Immediate measures should include a comprehensive security audit and incident response to prevent further unauthorized access.

---

Recommendations for Personal Data Protection

To protect their information, users are advised to:

• Change all associated passwords immediately.
• Use strong, unique passwords for each account.
• Enable two-factor authentication (2FA) wherever possible.
• Stay vigilant against phishing emails or suspicious messages.
• Regularly monitor accounts for unauthorized activity.

What is InsecureWeb?

InsecureWeb is a Dark Web monitoring service that keeps track of recent data breaches and tracks their impact by monitoring the darkest places of the internet.

Our commitment lies in providing top-notch cybersecurity services to our clients. Through continuous monitoring of the dark web and advanced threat detection methodologies, we strive to identify potential breaches promptly, enabling swift response and mitigation efforts. With our state-of-the-art tools and expertise, we prioritize the confidentiality, integrity, and availability of our clients’ data.