AdultFriendFinder gets hacked putting 412 million accounts at risk

AdultFriendFinder, an adult-oriented social network and online dating services have been hacked. The data breach after the hack has endangered approximately 412 million accounts which represent about 20 years worth customer data. According to leakedsource which obtained and verified the data. According to the report, the website was hacked in October, and the only other largest hack is the MySpace hack with 360 million accounts.

This is the second time that Friendfinder Network was breached in two years with the previous breach in May 2015. In total 412,214,295 users have been affected and the hackers used “Local File Inclusion” exploit to hack the website as reported by CSO . Leaked Source has decided not to make the data searchable for accounts on the main page. According to the reports, hackers also found data related to deleted user accounts which had their email addresses formatted as ’email@address.com@deleted1.com'.

The passwords related to all the users have been cracked and can be used by hackers to log in. However, it is surprising that almost half of the account passwords are already stored in clear text file format given that the website was hacked earlier. On checking the passwords available in plain text file, the most popular password was ‘123456.’

This is the second major hack for an online dating with the first major hack attack on Ashley Madison in July 2015 . During the hack, hackers stole all the customer data including names, addresses, credit card information and sexual fantasies. They threatened to post the data online if Ashley Madison was not shut down. The hackers released all the user data in August 2015.