The Wedding Company, India’s largest end-to-end wedding planning service operating as betterhalf.ai, was listed on the leak site of the ransomware group Killsec on 5 October 2024. The listing states that internal files were exfiltrated during a ransomware attack. The company has not yet published a public breach notification, and the leak-site posting does not disclose the number of affected individuals or the precise volume or categories of data taken.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch betterhalf.ai
Get alerted the next time betterhalf.ai files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about betterhalf.ai’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
Primary Disclosure Details
The Killsec leak site entry states that The Wedding Company suffered a ransomware intrusion in which attackers successfully exfiltrated internal files before encryption or during the double-extortion process. No sample data has been published at the time of the listing, and the post does not specify which systems were compromised or what exact record types were removed. The disclosure simply states that the victim failed to meet the group’s demands, triggering the public listing. Because the primary source provides no victim count or detailed data inventory, the exact scale of personal information at risk remains unknown to the public.
Why This Matters for You and Your Family
If you planned or booked a wedding through The Wedding Company or betterhalf.ai, your personal information may now sit in an attacker’s archive. Wedding vendors routinely collect full names, addresses, phone numbers, email addresses, government identification copies, payment details, guest lists, and intimate event notes. When such records leave a company’s control, they become permanent currency on underground markets. Even without an exact count, the breach represents a high-severity exposure for every couple, family member, and vendor whose details passed through the platform. Internal files exfiltrated in a ransomware attack almost always include spreadsheets, databases, and documents that link real identities to life events, making targeted fraud and harassment far easier.
Doxxing and Identity-Chain Risks
A wedding planning breach creates unusually rich material for doxxing chains. Names and phone numbers harvested here can be cross-referenced with social-media wedding hashtags, vendor reviews, and children’s gaming accounts that reuse the same family email addresses. Once an attacker links one handle to a real identity, the chain grows quickly: stolen wedding photos become deepfake material, guest lists become spear-phishing targets, and payment records feed identity theft. Credential leaks of this type frequently cascade into account takeovers on email, banking, and gaming platforms. The longer the data circulates unchecked, the harder it becomes to contain the downstream harm to you and your family.