In the latest twist in the ever-evolving world of digital security, a threat actor is causing quite a stir by offering a colossal database that allegedly holds information on hundreds of millions of OnlyFans users. This intriguing offer has surfaced on a cybercrime forum, with the seller asking for a cool $76,000. But here’s the twist – they claim that this stash of usernames, names, email addresses, phone numbers, and account activity wasn’t plucked from a direct breach of OnlyFans’ systems. Instead, it’s said to be a crafty compilation from previous leaks and public sources.
The seller was quick to clarify that the data was pieced together from a variety of past leaks, including those from social media giants like Twitter, Instagram, and Spotify, combined with publicly available information to map out OnlyFans users. This revelation was brought to light by HackRead, which noted that the sample data showed incomplete records and formatting that doesn’t quite match what you’d expect from a legitimate platform database. Even though some usernames and linked details align with public OnlyFans profiles, the authenticity of any payment card information remains unverified.
The implications of this data mélange are serious – the risks of phishing, blackmail, and harassment loom large for both creators and subscribers. This situation underscores a growing trend among cybercriminals to assemble searchable identity databases by fusing old breach data with publicly accessible information, raising alarms about privacy and security in the digital age.