Il Manifesto data leak exposes detailed reader activity and email data

The Il Manifesto data leak has exposed sensitive reader information belonging to visitors and subscribers of the Italian newspaper. An unsecured database left without protection allowed outsiders to access personal details, digital activity logs and precise location metadata. The incident highlights how easily media platforms can lose user trust when basic data security measures fail.

What Happened

A publicly accessible database tied to the publication stored millions of reading-activity records and subscriber details. The system remained open without authentication, giving anyone the chance to view the contents. Exposed information included email addresses of paying users, device identifiers and detailed browsing logs.

The logs recorded actions such as clicks and page visits, painting a clear picture of individual reader behaviour. Location data appeared accurate enough to narrow activity to specific neighbourhoods. Although account passwords did not surface, the level of behavioural and contact information was significant.

Why This Matters

Media outlets regularly handle sensitive data tied to personal interests and ideological leanings. In this case, exposed information included:

• Email addresses of paying subscribers
• Device and session identifiers
• IP-based location information
• Detailed click-stream and engagement activity

This type of dataset can reveal reading habits, geographic patterns and potential political preferences. When such information becomes accessible, affected users face reputational, privacy and targeted-scam risks. It also raises concerns about compliance with European privacy standards, given the sensitivity of behavioural data.

Lessons for Media Platforms

The breach illustrates the need for stronger data stewardship in the publishing industry. To avoid similar incidents, media companies should:

• Enforce mandatory authentication on all database access points
• Continuously monitor systems for public data exposure
• Limit collection of behavioural data when possible
• Establish clear retention and deletion schedules for reader logs
• Treat reader activity as personal and sensitive information, not routine analytics

Proactive security helps protect readers and preserves the credibility of editorial institutions.

Conclusion

The Il Manifesto data leak demonstrates how quickly trust erodes when private information becomes exposed. Sensitive analytics and subscriber details were left vulnerable through an avoidable oversight. Media platforms must prioritise secure data practices, apply strong access controls and approach audience information with the seriousness it deserves. Responsible handling of reader data is essential to safeguarding both privacy and institutional reputation.