The Epoch Times Data Breach Investigation

Recently, it was reported by multiple online sources that The Epoch Times had experienced a data breach impacting the privacy of its subscribers’ data. According to these sources, a cybersecurity team recently discovered a clear web forum post where a threat actor offered a database allegedly belonging to The Epoch Times purportedly exposing 32 million records.¹ According to the author of this forum post, the records contained Epoch Times subscribers’ usernames, full names, phone numbers, credit card numbers, card expiration dates, billing addresses, invoices, emails, devices, and locations.¹ While it is not known when this data breach might have occurred, on March 3, 2025, The Epoch Times published an article stating that it had been the victim of a years-long hacking campaign that included multiple other companies.² Beyond this, The Epoch Times has not made any statements regarding a recent data breach and as of May 15, 2025, The Epoch Times has not commented on reports of this data breach.