Old leaks can still create brand-new victims. - Video

340M OnlyFans Records Listed for Sale. Old Breaches, New Damage

A threat actor is selling what they claim is a massive database linked to OnlyFans users. The listing appeared on a cybercrime forum and advertised 340 million user records, with an asking price of about 0.313 Bitcoin, roughly $76,000. At first, the seller claimed the data came from internal OnlyFans databases. The listing mentioned usernames, names, emails, phone numbers, follower counts, likes, upload statistics, linked social profiles, account types, and possible payment-related details. But when Hackread contacted the seller directly, the story changed. The threat actor said they did not hack OnlyFans. Instead, they claimed the database was built by combining old breach data and public information from platforms like Twitter, Instagram, and Spotify, then matching that information to OnlyFans profiles. Hackread reviewed sample records and found incomplete fields, placeholder values, and public profile metrics. Some usernames matched real public OnlyFans profiles, but the email and payment card claims were not independently verified. So this does not look like a confirmed OnlyFans breach right now. But the risk is still serious. Even without a fresh hack, linking usernames, emails, phone numbers, social accounts, and adult-content profiles can expose people to phishing, blackmail, stalking, impersonation, harassment, and doxxing. The real story is identity correlation. Attackers do not always need to breach a platform. Sometimes they just combine old leaks with public data and turn it into a searchable target list.

TheContentClaw run: ef43dcc1076a4fa093f23efd9f3bef8d