WormGPT.ai, the AI niche favored by cyber‑criminals, just got hit by a huge data breach. In February 2026, a threat actor dumped its entire database on a dark‑web forum, exposing the identities of everyone who’d used the platform for illicit purposes.
What Data Was Leaked?
The breach is huge, reaching more than 19,000 people. Security teams say the leaked database holds a trove of sensitive data that really lifts the veil off users’ identities. Here’s what the attacker managed to snag:
Email addresses of registered users.
Payment-related data and transaction metadata.
Subscription details, including plan types and durations.
User Identifiers (UIDs) and internal account logs.
