NIUS data breach: what leaked and what to do
NIUS (nius.de) had a data breach on 2025-07-13 affecting 6,090 accounts.
!Personal data leaked !Sensitive
Added to the catalogue 24 Aug 2026.
What leaked
- Bank account numbers
- Email addresses
- Names
- Partial credit card data
- Physical addresses
- Purchases
What happened
In July 2025, the German news service NIUS suffered a data breach which was subsequently leaked publicly. The data included 6k unique email addresses along with names, physical addresses and payment details for purchases including either IBANs or partial credit card data (masked card number, type and expiry).
Description from Have I Been Pwned, in its words.
What to do
- Warn staff: emails, texts or calls quoting leaked details are not proof the sender is genuine.
- If card or bank details leaked, watch statements and tell the bank; if identity documents leaked, consider a credit ban or alert.
- Turn on two-factor sign-in on that service and on your email.
Common questions
What leaked in the NIUS breach?
Bank account numbers, Email addresses, Names, Partial credit card data, Physical addresses, Purchases
When did the NIUS breach happen?
The breach date is 2025-07-13; it was added to the public catalogue on 2026-08-23.
What should I do if my staff used this service?
Warn staff about emails, texts and calls quoting the leaked details, and watch for sign-in attempts on the services they use.
Was a staff address in this breach?
Check one address free, no storage. Breach Watch checks every staff address after each new breach.