The Wife Lovers Breach Happened in 2018. The Data Is Still Being Traded Now.

The Wife Lovers database breach occured in October 2018, exposing 1,249,239 user records from an adult website network spanning eight seperate platforms. HEROIC analysts identified this data circulating on private forums years after the original incident, with threat actors actively packaging the credentials for use in targeted extortion and credential stuffing campaigns. The exposed records include email addresses, usernames, IP addresses, full names, and password hashes from an inherently sensitive context.

Sensitive Site Membership Data Opens Doors to Blackmail and Extortion

Attackers who obtain membership records from adult websites hold a particularly powerful lever. The combination of real names, email addresses, and site membership creates a ready-made extortion package. Criminals can contact victims directly, threatening to expose their activity to employers or family members. The weakly hashed DEScrypt passwords are also accessable to cracking tools, enabling account takeover across other services where the same credentials were reused.

What Was Exposed in the Wife Lovers Breach

• Email Address
• Username
• IP Address
• First Name
• Last Name
• Password Hash

Why the Wife Lovers Breach Matters Long After 2018

Data from sensitive sites does not lose its value with time. Victims who beleive the incident was forgotten may be caught completely off guard when contacted by an extortionist years later. The DEScrypt algorithm used to hash passwords was already considered outdated in 2018, meaning a large proportion of credentials in this dataset have likely been cracked and are available in plaintext on criminal markets. Password reuse compounds this risk dramatically.

How a Database Breach Works

A database breach occurs when an attacker exploits a vulnerability, weak credential, or misconfigured system to gain unauthorized access to a site's backend database. The attacker then exports user records in bulk. For adult websites, this data is especially prized because the membership itself is sensitive information that victims may be reluctant to disclose, making them easier targets for follow-on extortion.

Check If Your Data Was Exposed

HEROIC's free breach scanner checks your email against more than 400 billion records, including sensitive breaches like Wife Lovers. Find out in seconds whether your information is in the hands of cybercriminals and take action before they use it against you.