A popular porn site, Brazzers site has been hacked.Nearly 800,000 accounts personal information have been compromised.
Breach monitoring website Vigilante.pw has provided the data set to the Motherboard for verification purpose.
The data released contains 790,724 unique email addresses, and usernames and plaintext passwords.
Public relations manager from Brazzers, Matt Stevens, told Motherboard in an email, “This matches an incident which occurred in 2012 with our 'Brazzersforum,' which was managed by a third party. The incident occurred because of a vulnerability in the said third party software, the 'vBulletin' software, and not Brazzers itself.”
“That being said, users’ accounts were shared between Brazzers and the 'Brazzersforum' which was created for user convenience. That resulted in a small portion of our user accounts being exposed and we took corrective measures in the days following this incident to protect our users,” Stevens added.
According to the Motherboard reports, both Brazzers users and administrator said that they had not used Brazzersforum.
Forum uses a separate URL from the website, it allows users to dicuss about differentporn scenes, stars, and letthem post what other things they want to watch on Brazzers.
Brazzersforum is displaying a message: “under maintenance," and is unavailable for the users.
“Note that the data provided contains many duplicates and non-functional accounts. We banned all non-active accounts in that list in case those usernames and passwords are re-used in the future,” Stevens from Brazzers said.
Ilia Kolochenko, CEO of web security firm High-Tech Bridge offers advice to users of such sites - "We should keep in mind that everything we send online - emails, pictures or instant messages - may be compromised. Don't think that encryption or auto-deletion of a video will help - once something goes online - it can be intercepted or compromised. There are numerous attack vectors - from our own devices that can be hacked and backdoor-ed to backup providers of companies who store or transfer the data.
Therefore, if you want absolute tranquility - make sure that all your digital assets can be published on page one of Daily Mail tomorrow without making you feeling uncomfortable. Obviously, I don't speak about confidential professional information, but about such things that afterwards may embarrass you and your colleagues."