Hacker offers database with data on 340 million OnlyFans users for sale

A listing has appeared on a hacker forum offering a database that allegedly contains data on 340 million OnlyFans users.

The database reportedly includes millions of records on both content creators and their subscribers, Hackread reports. The seller is asking 0.313 BTC, or roughly $76,000 at current exchange rates.

• The listing initially claimed the data was obtained from OnlyFans' internal databases. However, the seller later confirmed to Hackread that OnlyFans itself had not been breached.
• According to the seller, the database was assembled by cross-referencing older data leaks with publicly available profile information. The compilation reportedly draws on previous breaches involving Twitter, Instagram, Spotify, and other services.
• The information in the database is said to include usernames, email addresses, phone numbers, follower and like counts, statistics on uploaded content, account types, linked social media profiles, and partial payment information.

After reviewing a portion of the data, Hackread confirmed that several usernames match publicly available OnlyFans accounts. Many of the records, however, turned out to be incomplete, with empty fields and statistics that are already publicly accessible.

Hackread was unable to verify the authenticity of the email addresses or the bank card information included in the database. The publication noted that the database still poses a real risk, since it links email addresses, phone numbers, and social media accounts together. That combination significantly increases the risk of blackmail, doxxing, phishing, and stalking.