Popular adult cam website Stripchat recently suffered a database mess up and leaked sensitive data of roughly 200 million adult cam models and users. The database was left exposed on an Elasticsearch Cluster without any security authentication.
Volodymyr “Bob” Diachenko, head of security research Comparitech discovered the database on November 5. This database has about 200 million Stripchat records. Around 65 million user records contain email addresses, IP addresses, the amount in tips they gave to models, and timestamp. Another database contained around 421,000 records of models including their usernames, gender, studio IDs, tip menus and prices, live status, and Strop score.
Volodymyr reported this to Stripchat and the database was secured within 3 days. It is not clear if anyone else managed to get access to the database before it was secured.
Leaked information can be used to perform phishing campaigns. So, this breach could be a privacy risk for both users and models.
“The exposure could pose a significant privacy risk for both Stripchat viewers and models. If the data was stolen, they could face harassment, humiliation, stalking, extortion, phishing, and other threats, both online and offline,” Diachenko noted.
StripChat was founded back in 2016. The website gives users access to nude models. Users can send tips to their favorite models. This helps models in earning on the platform.
