MyFreeCams Sensitive Customer Database Stolen by Hackers
Note: We are reader supported and may earn a small commission when you click on links in posts
Customer data was stolen from adult content site MyFreeCams.com in a recent data breach. Cybercriminals have sold stolen customer data online. The data was exfiltrated in December 2020 via an SQL injection attack.
MyFreeCams.com is an adult video streaming and chat website that offers free and paid accounts. It is one of the top 1,000 most visited websites in the world and a top destination for explicit content.
Viewers rely on anonymity so stolen usernames and email present a tremendous concern.
Two million premium customers are impacted by the MyFreeCams data breach.
READ Why Use a VPN?
“They’ve also emptied their cryptocurrency wallet after collecting ~$22,400 in Bitcoin for the stolen data across 49 transactions, according to the report on CyberNews.
MyFreeCams Stolen Customer Detail Includes
- Usernames
- Unencrypted passwords
- Email addresses
- Customer’s balance of MyFreeTokens for each account
The cybercriminals initially offered 10,000 MyFreeCams customer records for $1,500 US dollars payable in Bitcoin. Later smaller lots of data were priced for sale.
No credit card information was stolen in this cyber attack.
- We’ve put together a list of the best antivirus software
- Find out how a VPN can help you stay protected online
- See our list of the best VPNs for streaming
The company has disabled all customer passwords to ecure accounts.
It’s unknown if the cybercriminals or the buyers of the stolen data compromised any MyFreeCams.com accounts before the passwords were disabled.
If you have a MyFreeCams account, immediately change your password and consider using a password manager to create strong, complex passwords.
Risks to MyFreeCams Customers
The MyFreeCams.com data breach puts all users at risk of blackmail attempts, credential stuffing attacks, and financial theft. People often reuse the same password across multiple online accounts to make login credentials easier to remember. This means when a hacker steals one email address with the password (like they did in this cyber attack) then they can possibly use that information to compromise your workplace accounts or steal from your bank accounts.
According to CyberNews, the adult site has confirmed that the stolen customer data is legitimate. The company has begun to notify affected customers and models. A copy of the notice was posted on reddit.
