Uh-oh - millions of hook-up customers have their details exposed
But AdultFriendFinder still isn't telling new customers it's been hacked

Millions of randy souls have had their personal details, including sexual preferences, leaked online after hook-up site AdultFriendFinder was hacked.
Up to 3.9 million of the site's 64 million users had personal information such as their email addresses and bedroom predilections revealed online, according to Channel 4 News, which broke the story last night.
The casual dating network has now called in police and security experts to help it understand just how far reaching the hack has been.
A hacker known only as ROR[RG] posted the names, emails, postcodes, dates of birth and computer IP addresses of victims of the hack in a forum.
Their sexual orientations and sexual preferences were also posted publicly by the hacker, found Channel 4 News, which said no credit card details have yet surfaced.
The site's owner, FriendFinder Networks, released a statement saying it "fully appreciates the seriousness of the issue", and would take appropriate steps to protect members.
But security expert Graham Cluley wrote in a blog post that, using a pseudonym and fake email address, he had been able to sign up to the site without receiving any warning the site was insecure.
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
He said: "Appropriate steps to protect your customers, AdultFriendFinder? How about posting a warning on your website so your members can look out for phishing emails, or malware which might be sent to them?
"What about some advice about the type of threats that users could be exposed to - including, potentially, blackmail - if their membership of the site is uncovered?"
It's the latest in a string of high profile data breaches, including health insurance firm CareFirst's loss of 1.1 million customers' details revealed yesterday by FireEye Mandiant, but which happened a year ago.
Meanwhile, TalkTalk confirmed in February that a fraction of its 4 million customerbase had their accounts compromised in a cyber attack.
The Information Commissioner's Office (ICO) this week indicated it would be reluctant to use new powers proposed by the EU to fine data breach organisations up to five per cent of their annual turnover.
A statement from FriendFinder Networks read: "FriendFinder Networks Inc. has only just been made aware of this potential issue and understands and fully appreciates the seriousness of the issue.
"We have already begun working closely with law enforcement and have launched a comprehensive investigation with the help of leading third-party forensics expert, Mandiant.
"Until the investigation is completed, it will be difficult to determine with certainty the full scope of the incident, but we will continue to work vigilantly to address this potential issue and will provide updates as we learn more from our investigation.
"We cannot speculate further about this issue, but rest assured, we pledge to take the appropriate steps needed to protect our customers if they are affected."
-
Bigger salaries, more burnout: Is the CISO role in crisis?
In-depth CISOs are more stressed than ever before – but why is this and what can be done?
By Kate O'Flaherty Published
-
Cheap cyber crime kits can be bought on the dark web for less than $25
News Research from NordVPN shows phishing kits are now widely available on the dark web and via messaging apps like Telegram, and are often selling for less than $25.
By Emma Woollacott Published
-
Capita tells pension provider to 'assume' nearly 500,000 customers' data stolen
Capita told the pension provider to “work on the assumption” that data had been stolen
By Ross Kelly Published
-
Gumtree site code made personal data of users and sellers publicly accessible
News Anyone could scan the website's HTML code to reveal personal information belonging to users of the popular second-hand classified adverts website
By Connor Jones Published
-
Pizza chain exposed 100,000 employees' Social Security numbers
News Former and current staff at California Pizza Kitchen potentially burned by hackers
By Danny Bradbury Published
-
83% of critical infrastructure companies have experienced breaches in the last three years
News Survey finds security practices are weak if not non-existent in critical firms
By Rene Millman Published
-
Identity Automation launches credential breach monitoring service
News New monitoring solution adds to the firm’s flagship RapidIdentity platform
By Praharsha Anand Published
-
Neiman Marcus data breach hits 4.6 million customers
News The breach took place last year, but details have only now come to light
By Rene Millman Published
-
Indiana notifies 750,000 after COVID-19 tracing data accessed
News The state is following up to ensure no information was transferred to bad actors
By Rene Millman Published
-
Pearson fined $1 million for downplaying severity of 2018 breach
News The SEC found the London-based firm made “misleading statements and omissions” about the intrusion
By Rene Millman Published