Sexting site data breached

[BOB777]

A popular sexting website has exposed thousands of photo IDs belonging to models and sex workers who earn commissions from the site.

SextPanther, an Arizona-based adult site, stored more than 11,000 identity documents on an exposed Amazon Web Services (AWS) storage bucket, including passports, driver’s licenses and Social Security numbers, without a password. The company says on its website that it uses these documents to verify the ages of models with whom users communicate.

Most of the exposed identity documents contain personal information, such as names, home addresses, dates of birth, biometrics and their photos.

Although most of the data came from models in the U.S., some of the documents were supplied by workers in Canada, India and the United Kingdom.

The site allows models and sex workers to earn money by exchanging with paying users text messages, photos and videos, including explicit and nude content. The exposed storage bucket also contained more than 100,000 photos and videos sent and received by the workers.

It was not immediately clear who owned the storage bucket. TechCrunch asked U.K.-based penetration testing company Fidus Information Security, which has experience in discovering and identifying exposed data, to help.

Researchers at Fidus quickly found evidence suggesting the exposed data could belong to SextPanther.

An hour after we alerted the site’s operator, Alexander Guizzetti, to the exposed data, the storage bucket was pulled offline.

“We have passed this on to our security and legal teams to investigate further. We take accusations like this very seriously,” Guizzetti said in an email, who did not explicitly confirm the bucket belonged to his company.

Using information from identity documents matched against public records, we contacted several models whose information was exposed by the security lapse.

“I’m sure I sent it to them,” said one model, referring to her driver’s license, which was exposed. (We agreed to withhold her name given the sensitivity of the data.) We passed along a photo of her license found in the exposed bucket. She confirmed it was her license, but said that the information on her license is no longer current.

“I truly feel awful for others whom have signed up with their legit information,” she said.

The security lapse comes a week after researchers found a similar cache of highly sensitive personal information of sex workers on adult webcam streaming site, PussyCash.

More than 850,000 documents were insecurely stored in another unprotected storage bucket.

Link >> https://techcrunch.com/2020/01/24/sexti ... a-exposed/

[vblogger]

Is it the month for porn sites to be hacked/leaked or what, last week it was pussycash/ImLive now this one.

[killah]

Well it's a lot less data than the major one at ImLive

[brt22]

Well it's a lot less data than the major one at ImLive

Still 11,000 identities

[jag]

This sexting where people send nude photos of themselves and sex messages never appealed to me

[cimage]

This sexting where people send nude photos of themselves and sex messages never appealed to me

dumb thing to do

[unicams]

The one that sticks in my mind is Anthony Weiner sexting his weiner pics rofl

[badkitty]

Tighten up the server security and sites, all we can do to try prevent hackers exposing data.

[Romie]

My private parts are never put online, it is not how I roll.

[bucksm]

My private parts are never put online, it is not how I roll.

You'd never make it as a porn star

[GlennfromLA]

The one that sticks in my mind is Anthony Weiner sexting his weiner pics rofl

His last name is ........

[shoopa]

Not done any sexting myself & no intention to. It all seems stupid.

[greatpornlinks]

sexting seems a teenagers thing to do not for mature people

[pornmafia]

If you never sexted you have nothing to worry about like me.

[Franksdomains]

Sexting has to be the worst idea any person dreamt up. It is plain dumb sending nude pics to others.