Databases containing 3.8 million adult dating and Naughty America users' web accounts are up for sale on a dark web marketplace. As reported by Infosecurity Magazine, a hacker is advertising several leaked databases on the underground web forum The Real Deal. Those databases are believed to contain 3.8 million users' information, which includes account credentials stolen from the adult-themed production house Naughty America.
The price tag for the information is just US$300, or about eight-thousandths of a cent per each compromised account. That offer could reflect the going rate for stolen adult dating user accounts, or it could be due to the fact that each of the account passwords are either old or protected by bcrypt, a strong cryptographic algorithm which takes time and resources to break. At this time, Naughty America and other adult content sites allegedly affected by the data leak have yet to confirm whether the stolen information is legitimate. Security researcher Troy Hunt has received at least one user confirmation via his HaveIBeenPwned service. That user allegedly created an account with Naughty America and soon after canceled their subscription. Thomas Fox-Brewster, a writer for Forbes.com, reports he has also received a few users' confirmations.
“Forbes was unable to independently verify the figures, though the data dealer, going by the name of Peace, passed on additional databases containing more than the small sample provided on the market,” Fox-Brewser said. “Four of more than 30 individuals included in the leaks responded to Forbes’ attempts at contact, saying they had used Naughty America or Suite703 [another adult-themed website] and planned to change their passwords. Two said they had cancelled their subscriptions more than a year ago. Naughty America’s privacy policy does not state the company will delete user information once an account is terminated.”
Naughty America and Suite703 are just two of the latest adult websites to be breached. Back in July 2015, news first broke about a group of hackers who leaked sensitive internal data stolen from the parent company of Ashley Madison, another adult dating website. Ultimately, the hackers published all 37 million Ashley Madison users' account information online.
Meet Fortra™ Your Cybersecurity Ally™
Fortra is creating a simpler, stronger, and more straightforward future for cybersecurity by offering a portfolio of integrated and scalable solutions. Learn more about how Fortra’s portfolio of solutions can benefit your business.
