FLORIDA, U.S. - More than 400 million accounts have been exposed after the FriendFinder Network, an adult dating site that claims to be the ‘world’s largest sex and swinger community’ was hacked through a local inclusion exploit.
The massive data breach created waves across the internet after it exposed over 412 million accounts, emails and passwords from the websites and made them available on criminal marketplaces.
The database, however, does not include personal information but it did confirm that the hacker had been a user.
Without any surprise, the passwords revealed were awfully low on security - with the top three most used passwords being "123456," "12345" and "123456789."
Some other details that the database reportedly included was whether or not the user was a VIP member, users’ browser information, the last IP address used to log in, and confirmation on a users purchases.
What’s shocking is that the database also included over 15 million accounts that had been previously deleted, that has raised concerns.
At the same time, the site also stored information for former assets, such as Penthouses, that are no longer in its possession.
This isn’t the first time that the FriendFinder Network has been hacked. The site was earlier hacked in May 2015, exposing 3.5 million user accounts.
In 2015, another online dating website, Ashley Madison was hacked, exposing user accounts and their intimate details such as their sexual preferences, fetishes, and other fantasies to everyone online.
In contrast, the recent FriendFinder hack did not contain details of sexual orientation or the likes.
According to Diana Ballou, vice president and senior counsel of FriendFinder, “Over the past several weeks, FriendFinder has received a number of reports regarding potential security vulnerabilities from a variety of sources. Immediately upon learning this information, we took several steps to review the situation and bring in the right external partners to support our investigation.”
Meanwhile, FriendFinder has yet to officially give a statement and justify as to why the company had been storing deleted accounts.
More about →
The massive data breach created waves across the internet after it exposed over 412 million accounts, emails and passwords from the websites and made them available on criminal marketplaces.
The database, however, does not include personal information but it did confirm that the hacker had been a user.
Without any surprise, the passwords revealed were awfully low on security - with the top three most used passwords being "123456," "12345" and "123456789."
Some other details that the database reportedly included was whether or not the user was a VIP member, users’ browser information, the last IP address used to log in, and confirmation on a users purchases.
What’s shocking is that the database also included over 15 million accounts that had been previously deleted, that has raised concerns.
At the same time, the site also stored information for former assets, such as Penthouses, that are no longer in its possession.
This isn’t the first time that the FriendFinder Network has been hacked. The site was earlier hacked in May 2015, exposing 3.5 million user accounts.
In 2015, another online dating website, Ashley Madison was hacked, exposing user accounts and their intimate details such as their sexual preferences, fetishes, and other fantasies to everyone online.
In contrast, the recent FriendFinder hack did not contain details of sexual orientation or the likes.
According to Diana Ballou, vice president and senior counsel of FriendFinder, “Over the past several weeks, FriendFinder has received a number of reports regarding potential security vulnerabilities from a variety of sources. Immediately upon learning this information, we took several steps to review the situation and bring in the right external partners to support our investigation.”
Meanwhile, FriendFinder has yet to officially give a statement and justify as to why the company had been storing deleted accounts.


