Data Breach at Thermomix Recipe Forum Exposes Profile Information of 3.3 Million Users

Unknown perpetrators have stolen the personal information of 3.3 million users of the official Thermomix recipe forum Rezeptwelt.de.

According to Vorwerk, which runs the forum, the breach resulted from unauthorized access to a subordinate server of an external service provider, exposing certain user profile information. The security incident affected users of the platform and its associated forums in the Czech Republic, Spain, France, Italy, Poland, Portugal, and Australia.

The company said no passwords, financial information, or critical internal systems were compromised.

The compromised data, depends on the type of information provided by users in their profiles, and may include:

• First and last name
• Address
• Date of birth
• Telephone number
• Email address
• Cooking preferences

All affected users have been fully informed of the incident, and Vorwerk has taken immediate action to mitigate further risks.

“The security vulnerability existed between January 30th and February 3rd, 2025, and has since been fully resolved,” the company noted. “The subsequent forensic analysis confirmed that the incident is limited exclusively to the Rezeptwelt.de forum and its associated localizations. All other Vorwerk platforms, including the Thermomix® ecosystem, Cookidoo®, the Vorwerk webshops and other services remain unaffected.”

How Users Can Stay Safe

While there is no current evidence of widespread misuse of the leaked data, affected users should remain vigilant for phishing or spam emails. Vorwerk advises users to be cautious of suspicious emails containing unsolicited attachments from unknown senders and requests for personal information or immediate actions.

For further inquiries or support, users are encouraged to visit Rezeptwelt.de’s official help center or contact Vorwerk’s customer support team.

To further mitigate risks, stemming from data breaches, we also advise users to reset their password (for Rezeptwelt.de and any other platform sharing the same login credentials). Ensure that the new password is unique to that platform.

Need help managing the digital you and staying on top of data breaches?

Dedicated services like Bitdefender Digital Identity Protection help you stay proactive and immediately act whenever personal information is compromised in a breach.

Our identity protection service constantly monitors the public and the Dark web for traces of your personal data, instantly notifies you if your online persona has been compromised in a breach, and lets you patch holes in your digital footprint with one-click action items.