YouPorn passwords available for download, thousands of users exposed

Graham Cluley
Graham Cluley
@[email protected]

YouPornWant a free password for one of the world’s most popular adult websites?

YouPorn, one of the world’s most popular porn video websites and one of the top 100 websites of any kind in the world, appears to have been caught with its pants down – after a list of many of its users’ email addresses, passwords and dates of birth were left exposed on a public-facing server.

According to security blogger Anders Nilsson, the credentials of well over a million YouPorn users were publicly accessible.

Unlike the recent Brazzers porn site hack, however, sloppy practices are being blamed for the YouPorn incident, with debug data about users seemingly being stored in a public fashion since 2007.

Sign up to our free newsletter.
Security news, advice, and tips.

YouPorn user data

Hackers have been sifting through the information, and in some cases republishing it elsewhere online. So even though YouPorn appears to have now shut down the offending server – its users remain exposed.

YouPorn passwords

This is one of those cases where it’s not just bad to have your password exposed – it’s actually potentially worse to have your email address connected with this breach too.

You can imagine how employers and marital partners may be less than impressed to find you are registered for a website like YouPorn. And their discovery of your porn penchant is only a search and a click away.

But more than the embarrassment factor, there’s also a security issue here. We know that many internet users adopt the same password for multiple sites.

So, if your YouPorn password is now known, hackers might try that same password against your email address, your PayPal account, your Amazon account, and all many of other online resources.

If you are still using the same password on multiple sites, please change your dirty habit now.

Of course, some Twitter users couldn’t resist making a gag as the news of the data leak broke:

[tweet] [tweet hide_thread=’true’]

But it’s unlikely that the victims of this data breach will be finding things so amusing.

At the time of writing, there is no mention of the apparent data loss on YouPorn’s official blog (no, we’re not linking to it) or Twitter account.

Hat-tip: Thanks to Anders Nilsson for providing more information about this incident.

Graham Cluley is an award-winning keynote speaker who has given presentations around the world about cybersecurity, hackers, and online privacy. A veteran of the computer security industry since the early 1990s, he wrote the first ever version of Dr Solomon's Anti-Virus Toolkit for Windows, makes regular media appearances, and is the co-host of the popular "Smashing Security" podcast. Follow him on Twitter, Mastodon, Threads, Bluesky, or drop him an email.

What do you think? Leave a comment

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.