Nearly 800,000 accounts for popular porn site Brazzers have been exposed in a data breach. Although the data originated from the company's separate forum, Brazzers users who never signed up to the forum may also find their details included in the dump.
Motherboard was provided the dataset by breach monitoring site Vigilante.pw for verification purposes. The data contains 790,724 unique email addresses, and also includes usernames and plaintext passwords. (The set has 928,072 entries in all, but many are duplicates.)
Troy Hunt, a security researcher and creator of the website Have I Been Pwned? helped verify the dataset by contacting subscribers to his site, who confirmed a number of their details from the data.
It's unfortunate that my information was included in the breach, but that's the risk you run making an account anywhere on the web, a Brazzers user, who asked to remain anonymous, told Motherboard in an email.
Another user whose email was included in the data, called John, wrote, I used throwaway login/pass for this very reason.
Matt Stevens, public relations manager from Brazzers, told Motherboard in an email, This matches an incident which occurred in 2012 with our 'Brazzersforum,' which was managed by a third party. The incident occurred because of a vulnerability in the said third party software, the 'vBulletin' software, and not Brazzers itself.
That being said, users accounts were shared between Brazzers and the 'Brazzersforum' which was created for user convenience. That resulted in a small portion of our user accounts being exposed and we took corrective measures in the days following this incident to protect our users, Stevens added.
Indeed, both Brazzers users who spoke to Motherboard said that they had not used Brazzersforum.
On the forum, which uses a separate URL from the main site, users could discuss different Brazzers porn scenes and stars, or request a new scenario they would like to see in future Brazzers productions.
