The Relatos Amateurs Breach Exposed 100K Spanish User Accounts

In April 2022, Relatos Amateurs, a Spanish-language platform for user-submitted erotic stories, suffered a data breach that exposed 100,209 user records. The site is based in Spain and serves a Spanish-speaking audience, making this a breach that disproportionately affected users in Spain and across Latin America. What makes this seperate from a routine credential leak is the nature of the platform itself -- users who did not want their membership known now face the risk of exposure through their email addresses.

What Attackers Can Do With This Data

With 100,209 email addresses and MD5 password hashes in hand, attackers have two immediate paths. First, MD5 is a weak hashing algorithm that can be cracked rapidly using rainbow tables and GPU-based tools -- meaning many of these passwords are effectively already accessable in plaintext. Second, the email addresses themselves carry sensitive context: being associated with an adult content platform can be used for extortion, phishing, and targeted social engineering campaigns against affected users.

What Was Exposed in the Relatos Amateurs Breach

• Email Address
• Password Hash

Why This Spanish Breach Matters Beyond Spain

Spain-based breaches involving adult content sites create a unique dual risk: credential compromise and reputational exposure. Users in Spain and across Spanish-speaking countries who registered on Relatos Amateurs may not have used a dedicated email address, leaving their primary inbox -- and every account tied to it -- at risk. Because MD5 hashes are so quickly cracked, any password reuse across email, banking, or social platforms recieved by attackers can be exploited almost immediately.

How a Database Breach Works

A database breach occurs when attackers gain unauthorized access to a website's data store and extract user records. Platforms that store password hashes using outdated algorithms like MD5 offer minimal protection -- once the hash file is obtained, offline cracking tools can test billions of password combinations per second. This makes MD5-hashed passwords nearly as dangerous as plaintext storage for any user who chose a common or short password.

Check If Your Data Was Exposed

HEROIC's DarkWatch monitors over 400 billion exposed records from breaches worldwide, including the Relatos Amateurs breach. Search your email address now to see if your data has been compromised -- and change your passwords on any account where you may have reused the same credentials.