Adult streaming website hacked, hackers sell stolen data of 2 million users online for bitcoin

Top adult chat and streaming website MyFreeCams.com was hacked by unknown individual(s) who then went on to sell a database of the site on a popular hacker forum. The database includes records of 2 million users of MyFreeCams Premium service, including their usernames, passwords, email addresses, and MyFreeCams Token (MFC Token) amounts in plain text.

The data was reportedly extracted from company servers in December last year by carrying out an SQL injection attack.

Screengrab of the threat actor’s post

The author of the forum post is asking for $1500 in Bitcoin per 10,000 user records. They claim that a single batch would yield the buyers at least $10,000, which they could make by selling premium accounts with MFC Token (MyFreeCams’ virtual currency) balances on the black market.

MyFreeCams confirmed that that the leak was genuine and the company has notified affected users and reset their passwords. However, according to MyFreeCams, their investigation “traced this data to a security incident that occurred more than ten years ago in June 2010” and “the exploit that was used to obtain this data was closed shortly after it occurred.”

“MFC’s current systems prevent any similar attack. Until now, MFC did not have evidence that user data was actually compromised as part of the incident. We have informed affected users by email and reset their passwords. No credit card information was stored or compromised.”

― MyFreeCams

With nearly 70 million visitors each month, MFC is predominantly used by amateur webcam models to stream live shows and chat with site members who can purchase virtual MFC Tokens that they can use to tip the models or watch private shows.

The hacker’s post has now been deleted, as the threat actor deleted their account from the hacker forum. They’ve also emptied their cryptocurrency wallet after collecting approximately $22,400 in Bitcoin for the stolen data across 49 transactions.

The leak could put all users of MyFreeCams at risk of blackmail and extortion attempts, credential stuffing attacks, targeted fishing attacks, email spamming and more.

Click here to subscribe to The Commune on Telegram and get the best stories of the day delivered to you personally.