Hackers are selling data from 340 million users of an 18+ website.

A group of hackers has been selling data from 340 million users of the 18+ website OnlyFans, threatening to reveal the true identities of millions of content creators and fans, despite the company's denials.

This massive data leak was posted on a popular hacker forum, where the attackers claimed to be in possession of an internal database containing personal information and activity data for over 340 million accounts.

OnlyFans is currently an extremely popular paid subscription platform with over 4.5 million creators and nearly 380 million users, where privacy and anonymity are paramount due to the sensitive nature of the content. Known for its leniency in allowing adult content (18+), the platform is actively expanding into mainstream content areas such as fitness, cooking, music , and art to diversify its customer base.

Hackers claim to be in possession of data from approximately 340 million OnlyFans users. Photo: Nurphoto

According to the hackers, the data being offered for sale includes usernames, join dates, email addresses, follower counts, likes, number of photos and videos , live streams, and even payment card information and linked social media profiles. However, preliminary checks by security experts at Cybernews revealed only 10 sample profiles and suggest that this data may have been collected around August 2025.

Notably, the hacking group denied directly attacking OnlyFans' servers. Instead, they claimed to have built this database by compiling information from previous OnlyFans leaks, combined with publicly available sources and data from other platform breaches. OnlyFans quickly responded, asserting that the reports of this data leak were false.

While the true scale of the leak is still under investigation, experts warn that even if it's just a compilation of old data, it's extremely dangerous. Hackers could use the emails to cross-reference leaks from less sensitive services (like Netflix or Spotify) to find users' real identities, phone numbers, or addresses. This could pave the way for phishing, blackmail, or harassment campaigns directly targeting content creators.

(According to Cybernews)

Vietnamese businesses suffered over 320,000 cyber espionage attacks . The number of spyware attacks in Southeast Asia surged by 18% in 2025. Vietnam recorded the highest volume of attacks targeting business networks in the region.

Source: https://vietnamnet.vn/hacker-rao-ban-du-lieu-340-trieu-nguoi-dung-website-18-2519595.html