FriendFinder Networks, which operates sites including Adult FriendFinder, Cams and MillionaireMate, has been hit with a massive hack, according to breach tracking site Leaked Source.
While the most common accounts included in the data dump were from adultfriendfinder and cams, with more than 339 million and 62 million respectively, there were also more than seven million account credentials from penthouse, a domain which the company sold back in February.
Hook-up and dating site Adult FriendFinder has a serious database vulnerability that could reveal usernames, passwords and other information, it has been claimed
Leaked Source also found more than 15 million emails in the database in the format of “”. The site claimed that signing up with an email in this format is impossible, saying that the ” suffix was added by FriendFinder Networks.
“We’ve seen this situation many times before and it likely means these were users who tried to delete their account[s],” Leaked Source said. “The data is obviously still kept around because, you know, we’re looking at it.”
A total of at least 125 million passwords were stored in plaintext. Even those that were encrypted were hashed with SHA1, an encryption method that major vendors have discontinued due to the ease with which it can be cracked.
The existence of a Local File Inclusion (LFI) vulnerability in FriendFinder Networks’ database https://besthookupwebsites.org/sugar-daddies-usa/fl/orlando/ was brought to the attention of the company last month by a security researcher known on Twitter as 1×0123 (now real1x0123).