The Sexclub Breach Leaked 310K Email Addresses and Password Hashes

In April 2022, a database from Sexclub -- a Russian adult dating platform at sexclub.ru -- was breached and circulated on dark web forums. The exposed dataset contained 310,858 records including email addresses, usernames, IP addresses, and MD5-hashed passwords. The presence of IP addresses alongside account data makes this breach seperate from typical credential leaks in terms of the harm it can cause to affected users.

Extortion and Deanonymization Are the Primary Threats

When a dating platform is breached, the risks extend beyond credential stuffing. IP addresses can be used to geolocate users and link anonymous accounts to real identities. Email addresses allow attackers to contact victims directly. The combination of these data points has historically been used in extortion campaigns -- where attackers threaten to expose a victim's membership unless a payment is made. MD5 hashes are also accessable to cracking with modern GPU tools, meaning passwords may be recoverable.

What Was Exposed in the Sexclub Breach

• Email Address
• Password Hash (MD5)
• Username
• IP Address

Why Dating Site Breaches Carry Elevated Risk

Data from adult or dating platforms carries a higher potential for reputational harm than most other breach types. Membership itself may be sensitive information. Victims who used the same email address or password on professional platforms -- LinkedIn, workplace accounts, or financial services -- face compounding exposure. The reputational risk alone can make affected individuals reluctant to report or seek help, which is precisely what extortion actors rely on.

How a Database Breach Works

A database breach occurs when an attacker gains unauthorized access to a web application's backend data store. In this case the breach occured from what appears to be a direct export of the user table. MD5 is a deprecated hashing algorithm that modern cracking tools can process at billions of hashes per second, meaning password recovery from this dataset is feasible with consumer hardware.

Check If Your Data Was Exposed

HEROIC indexes over 400 billion breach records, including the Sexclub dataset. If you have ever used this platform or are concerned your email appeared in this breach, run a free check at HEROIC.com to see exactly which breaches contain your information.