Hackers claim to be selling 340 million stolen OnlyFans records but experts are already skeptical on how serious hack is

Date:
Tue, 26 May 2026 19:35:00 +0000

Description:
OnlyFans says the claims are false, so users can breathe easy.

FULL STORY ======================================================================Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Subscribe to our newsletter Dark web listing claims to be selling 340 million OnlyFans creator and user records, including PII and account activity metrics OnlyFans denies breach, and Cybernews analysis suggests the dataset is likely a compilation of past leaks and public sources rather than an internal dump Even if inauthentic, exposed emails and metadata could still enable phishing, profiling, spam, and harassment of creators and users A gigantic database, allegedly containing personally identifiable information (PII) of OnlyFans creators and users, is allegedly being offered for sale on the dark web - however, the authenticity of the data is being questioned, and the way it was obtained does not suggest an actual breach of the companys servers.

Security researchers from Cybernews reported spotting a new ad on a dark web forum, offering 340 million records scraped from internal OnlyFans databases: The listing provides exclusive access to an alleged OnlyFans internal
database dump containing approximately 350 million user records, the post reads. The dataset encompasses both fan and created accounts, exposing a
broad range of personally identifiable information and detailed account activity metrics. Latest Videos From You may like French government agency admits data breach as hacker alleges up to 19 million sensitive records
stolen breach may have exposed 'data from individual and professional accounts' LexisNexis confirms data breach, says hackers hit customer and business info 'We are continuing to monitor the situation closely': Crunchyroll investigating breach which reportedly stole data on 6.8 million users "False reports" The post further claims the archive holds peoples usernames, join dates, email addresses, follower count, like count, picture count, video count, stream count, payment card data information, and linked profiles.

Commenting on the news, a company spokesperson told Cybernews on background, these reports are false.

The publications researchers also analyzed the sample posted on the dark web and said it was underwhelming and that they were unable to conclude if the archive is authentic or not.

Based on the sample alone, we cannot confirm the true size of the data. However, the sample does indicate that individuals whose data is exposed
could be targets for phishing, the team explained. Are you a pro? Subscribe
to our newsletter Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed! Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors By submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.

However, the emails alone could serve as a sensitive reconnaissance point. Threat actors could use this information to cross-reference info from other adult content sites to profile exposed individuals.

The hackers didnt say they broke into OnlyFans, but rather compiled the information from previous OnlyFans leaks, cross-referenced them with public sources, other data breaches, and various publicly available information.

Cybernews hints that this might be true, and concludes that even in this form, the archive could be quite dangerous.

If this is a compilation, the data could be used for reconnaissance and profiling. For example, attackers could research whether user emails repeat across multiple websites or whether any additional sensitive info has been leaked. Also, exposed creators' contact info could also lead to spam and harassment directed towards them, the Cybernews team concluded. The best antivirus for all budgets Our top picks, based on real-world testing and comparisons

Read our full guide to the best antivirus 1. Best overall: Bitdefender Total Security 2. Best for families: Norton 360 with LifeLock 3. Best for mobile: McAfee Mobile Security Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.



======================================================================
Link to news story: https://www.techradar.com/pro/security/hackers-claim-to-be-selling-340-million -stolen-onlyfans-records-but-experts-are-already-skeptical-on-how-serious-hack -is


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)