The MindFuel Foundation says a snapshot of a historical testing database was placed in a location accessible to its developers by a third-party service provider, and that this snapshot may have been viewed by automated web crawlers on May 5, 2025. The company describes the exposure as accidental disclosure rather than a targeted attack: the data wasn’t stolen through hacking, it was simply left reachable in a spot it shouldn’t have been. MindFuel says the information involved was most likely old testing data, but acknowledges there is a small chance that real production data from before May 26, 2021 was mixed in.
The notice is aimed at people who had accounts on Wonderville, MindFuel’s platform, with data dating back to before May 26, 2021. MindFuel has not identified a specific number of affected individuals in this notice, and it says it is not currently aware of anyone’s information being misused.
What information was exposed?
- First and last name
- Email address
- City, state/province, and country
- Phone number, if it had been provided (optional field)
- Username
- Hashed password
MindFuel says it removed the exposed data, triggered a reset of all Wonderville account passwords, and set up a secure process for file transfers going forward. No free credit monitoring or identity protection service is mentioned in this notice.
What should you do now?
- If you had a Wonderville account, make sure you’ve completed the password reset and choose a new, unique password you haven’t used elsewhere.
- Enable multi-factor authentication on your Wonderville account and any other accounts that offer it.
- Watch for phishing emails or calls that pretend to be from MindFuel and ask for personal information, login details, or payment — legitimate companies won’t ask you to confirm passwords by email.
- Avoid clicking links or opening attachments in unexpected emails, even if they appear to reference this incident.
- Because hashed passwords and usernames were involved, consider signing up for a service like Aura or LifeLock, which can alert you if your information appears elsewhere online.
- Keep an eye on your email account for unusual sign-in alerts or activity you don’t recognize.
If you have questions, The MindFuel Foundation can be reached at Suite 260, 3512 33 Street NW, Calgary AB T2L 2A6, by phone at 403.220.0077, or by email at [email protected].