The Post Millennial, a Canadian conservative news website, suffered a data breach in May 2024 after attackers used social engineering to gain access to its systems. The breach affected three separate groups: hundreds of writers and editors, tens of thousands of newsletter subscribers, and a far larger corpus of approximately 57 million records drawn from what appear to be mailing lists associated with the publication's digital campaigns. Alongside the data theft, attackers defaced the website's homepage with a fabricated political statement, suggesting ideological rather than financial motivation. The stolen data was subsequently posted to a hacking forum and widely distributed via torrents. The exposed information varied by group. Staff and contributors had IP addresses, physical addresses, and email addresses exposed. Subscribers had names, email addresses, usernames, phone numbers, and plain text passwords taken, meaning passwords were stored without encryption and are immediately usable by anyone who obtained the file. The broader mailing list corpus, which has not been independently verified as belonging to The Post Millennial, contained combinations of names, phone numbers, home addresses, and email addresses depending on the campaign source. The nature of the outlet means the breach also exposes the political and ideological interests of those affected, which carries its own risks. The Post Millennial has not made detailed public statements about the full scope of the breach or any investigation into it. No regulatory actions or legal proceedings have been publicly confirmed. For affected individuals, the practical risks are serious: plain text passwords should be changed immediately on any account where they were reused, and those whose home addresses or names were exposed should be alert to targeted phishing, harassment, or unsolicited contact given the politically sensitive nature of the data.

Digital media outlets collect subscriber identity, emails, billing records, newsletter activity, and content-engagement data across publishing and audience-management systems.

The Post Millennial has continued operating as a digital conservative publication following the 2024 breach. No major organizational changes beyond the breach aftermath have been prominently reported. The outlet's editorial operations continued across its Canadian and U.S. properties.