Adult FriendFinder (2016) Data Breach

What happened?

In October 2016, the adult entertainment company Friend Finder Networks suffered a massive data breach . The incident impacted multiple separate online assets owned by the company, the largest of which was the Adult FriendFinder website alleged to be "the world's largest sex & swinger community". Exposed data included usernames, passwords stored as SHA-1 hashes and 170 million unique email addresses. This incident is separate to the 2015 data breach Adult FriendFinder also suffered. The data was provided to HIBP by dehashed.com .

When did it happen?

The breach date in the public record is October 16, 2016. The record was added to the catalogue on February 6, 2020 and last updated there on February 7, 2020.

What information was reported as exposed?

• Email addresses
• Passwords
• Spoken languages
• Usernames

These are incident-level categories. The record does not prove that every category was exposed for every affected person.

Who may be affected?

This record may be relevant to people who had an account or other relationship with Adult FriendFinder (2016) or used adultfriendfinder.com around October 16, 2016. A catalogue entry does not establish that every customer was affected or that every listed data category applied to each person. Compare the record with an official notice addressed to you.

What should you do?

Choose actions that match the information involved. If you find signs that someone is using your identity, the Federal Trade Commission provides a personal recovery plan at IdentityTheft.gov.