--- title: Security Incident Notice, October 2026 description: Security Incident Notice, October 2026 --- [Skip to content](https://support.worldly.io/security-incident-notice-october-2026#main-content) [Submit a request](https://support.worldly.io/kb-tickets/new?hsLang=en) [![Worldly logo](https://support.worldly.io/hs-fs/hubfs/Worldly%20Media%20Kit/Worldly%20Logos/Worldly_LogoTM_Red.png?width=250&height=61&name=Worldly_LogoTM_Red.png)](https://support.worldly.io/?hsLang=en) Open main navigation Close main navigation - [Submit a request](https://support.worldly.io/kb-tickets/new) How can we help? - There are no suggestions because the search field is empty. 1. [Help Center](https://support.worldly.io/?hsLang=en) 2. [Help, Resources, and Payment FAQs](https://support.worldly.io/help-resources-and-payment-faqs?hsLang=en) # Security Incident Notice, October 2026 ### **What happened** An organization with authorized access to Worldly data had a security issue, and as a result an unauthorized party was able to download Worldly users’ names and email addresses. The Worldly platform itself was not affected. ### **What information was involved** User names and email addresses. *User passwords and account security are still safe and intact.* ### **Actions we have taken** We turned off the organization’s access to Worldly data until we confirm its systems are secure. We identified who accessed the data and are requiring them to delete all records. ### **What users should do** Users don't need to change anything in their account. Because names and emails can be used for phishing, please: - Be cautious with unexpected emails asking users to sign in, share credentials, open attachments, or make payments. - Know that Worldly will never ask for users' password by email. - Check the sender's address. Worldly emails come from @worldly.io. - Go to the Worldly platform directly instead of clicking a link if unsure. ### **Additional details** Q: What data was accessed? A: Names and email addresses. If we learn any additional relevant information, we will share the details with users. Q: What about API keys? Were API keys rotated? Do I need to do anything? A: Yes, we have rotated all partner API keys as a precaution. If user integration was affected, our Engineering team will reach out directly with the new key and setup steps needed. Users do not need to take action unless we contact you. Q: How did this happen? A: An unauthorized person accessed our database through a third-party’s integration misconfiguration. We contained it and are implementing controls to prevent it from happening again. Our platform was not compromised. ### **For more information** Email [privacy@worldly.io](mailto:privacy@worldly.io). To learn about your data protection rights, see our [Global Privacy Policy](https://worldly.io/privacy-policy/). [![Worldly logo](https://support.worldly.io/hs-fs/hubfs/Worldly%20Media%20Kit/Worldly%20Logos/Worldly_LogoTM_Red.png?width=120&height=30&name=Worldly_LogoTM_Red.png "Worldly logo")](https://www.worldly.io) © 2026 Worldly. All Rights Reserved [Terms of use](https://worldly.io/terms-of-use/)  |  [DPA](https://worldly.io/data-privacy-addendum/)  |  [Privacy Policy](https://worldly.io/privacy-policy/)  |  [Cookie notice](https://worldly.io/cookie-notice/)