Chaturbate

We've been tracking a steady rise in credential stuffing attacks targeting platforms with lax account security, and what started as routine monitoring quickly escalated when we observed a massive dump of user data linked to **Chaturbate**, a popular adult webcam site. What really struck us wasn't just the sheer volume of records—over **2.4 million**—but the highly personal nature of the exposed information, including partial credit card data and detailed user preferences. The data had been circulating quietly on a well-known hacking forum for several weeks, but we noticed a spike in discussions referencing it alongside tutorials for account takeover, suggesting it's now being actively weaponized.

### Chaturbate Data Leak Exposes 2.4 Million User Records on Hacking Forum

A significant data breach involving **Chaturbate** has resulted in the exposure of over **2.4 million** user records. The breach, which appears to have originated from a database compromise or scraping operation, was first observed on a prominent hacking forum on **May 15, 2024**, although indications suggest the data may have been accessible earlier. The size and composition of the leak caught our attention due to the inclusion of sensitive PII, making it a potentially valuable asset for identity theft, blackmail, and other malicious activities. The fact that it's being actively discussed in the context of account takeover guides elevates the immediate risk to users. This incident highlights the ongoing threat of large-scale data breaches targeting online platforms and the subsequent exploitation of compromised data in credential stuffing and other attacks.

**Breach Stats:**

* **Total records exposed:** 2,457,321
* **Types of data included:** Usernames, email addresses, IP addresses, genders, countries, dates of birth, join dates, last login dates, number of followers, number of following, chat activity timestamps, hashed passwords (bcrypt), partial credit card data (last 4 digits, expiry date, card type), purchase histories, and detailed user preferences.
* **Sensitive content types:** Partial credit card information, detailed personal profiles, and records of user activity on the platform.
* **Source structure:** The data was presented as a series of large JSON files, suggesting a direct database export.
* **Leak location(s):** A well-known hacking forum accessible via Tor.

**External Context & Supporting Evidence:**

Initial reports indicate that the leak was first publicized on the hacking forum **BreachForums**, where a user offered the data for sale or trade. Subsequent analysis revealed that the data was also circulating on several Telegram channels dedicated to data breaches and account cracking.

According to reporting by **BleepingComputer**, similar breaches targeting adult websites are becoming increasingly common, with attackers often leveraging automated tools to scrape user data or exploit vulnerabilities in website security. This incident aligns with a broader trend of increased targeting of online platforms with large user bases and sensitive data.

One Telegram post claimed the files were "collected from a vulnerability in the Chaturbate API." While this claim remains unverified, it underscores the potential for API vulnerabilities to be exploited in large-scale data breaches. Further investigation is needed to determine the exact attack vector used in this incident.