Adult Friend Finder hacked – 3M users’ data leaked – The hackers claiming responsibility for this breach have uploaded 3,528,458 files online.
Online dating destination Adult Friend Finder has more than 60 million members worldwide. Unfortunately, at least three million accounts have been compromised after a group of hackers from Thailand hacked the site in retaliation.
The first rumors of the Adult Friend Finder problems emerged last month. An IT consultant and darknet researcher, who goes by the pseudonym Teksquisite, discovered the files on a forum in April. Salted Hash, looking to confirm its findings, discovered the same posts and files in short order.
The hackers claiming responsibility for this breach claim to be from Thailand, and have started bragging that they are immune to US law because of their location. As for local law enforcement, they are confident they can bribe the authorities to “get it clean,” and so they continued posting about the Adult Friend Finder files.
Using the handle ROR [RG], the hackers claim to have compromised the adult website in order to get revenge because a friend of theirs owed them $247,938.28.
They then posted a ransom demand of $100,000 USD on the forum, supposedly to prevent any further leaks.
In total, in 15 different CSV files, the ROR [RG] group posted 3,528,458 files. The files are database dumps with 27 fields in total, the most important being the presence of: IP address, email, handle, country, state, zip code, language, sex, race, and birth date. The dates confirm that the data is at least 74 days old.
Armed with the compromised information, forum members began downloading the files and using the information for spam campaigns. One member was perhaps particularly expressive:
"Dude you are the ****, I am loading these up in the mailer now. I will send you some dough from what it makes. Thank you!!”
ROR [RG] did not state whether payment card details were part of the database they had breached, although there was a direct request for this information on the forums. In the files published, payment details are not present.
