Naughty leak : Information of 3.8 million porn users from North America leaked on Dark Web

Hacker is selling email ids and passwords of 3.8 million North American porn surfers for a paltry $300

Remember the Ashley Madison hack, where the hackers, Impact Team stole user data of approximately 37 million users. After Ashley Madison here is another of porn website users data being leaked. According to a report stolen databases containing emails and passwords of 3.8 million porn users is reportedly being sold on Dark Web.

A hacker advertising the info on the underground The Real Deal site claims to have taken the database from the owner of the Naughty America porno production house, as well as from affiliated groups like gay porn site Suite703 and related forums.

The hacker is reportedly asking a paltry $300 for the entire database because the account passwords were protected with bcrypt, a strong cryptographic algorithm—and also, some of the data could be old and useless as of today.

To check the authenticity of the data leak, security researcher Troy Hunt checked the data with subscribers to his HaveIBeenPwned service. He stated that one of his subscribers used one of the ids supposedly from leaked Naughty America database and immediately got signed up a three-day trial for a Naughty America account before cancelling.

Forbes carried out its own investigation. “Forbes was unable to independently verify the figures, though the data dealer, going by the name of Peace, passed on additional databases containing more than the small sample provided on the market,” the outlet said. “Four of more than 30 individuals included in the leaks responded to Forbes’ attempts at contact, saying they had used Naughty America or Suite703 and planned to change their passwords. Two said they had cancelled their subscriptions more than a year ago. Naughty America’s privacy policy does not state the company will delete user information once an account is terminated.”

Hackers have been targeting adult themed sites in the recent past. One of the biggest breach to hit a adult site was when hackers stole 237,000 user account details from porn site TeamSkeet. This data was sold on dark web forum for just $400. Similarly in February, 2016, hackers hacked a dating website Mate1  and stole approximately 27 million user account credentials, including plaintext passwords, This data trove was sold on the dark web forum called Hell.’

The buyers love this kind of data because it can be used to surf the porn websites for free as well as can be used to blackmail the victim and demand ransom in lieu of not leaking the information publically.

LEAVE A REPLY

Please enter your comment!
Please enter your name here