Last month, a group of hackers breached the security of dating website Ashley Madison and made away with millions of sensitive user account information.
Earlier today the same group - now known as the 'Impact Team' - made good on their promise of exposing the controversial site, dumping nearly 10 gigabytes worth of account names, passwords, email addresses, and credit card transaction records onto the dark web.
TrustedSec has a detailed breakdown of the information:
This included a full domain dump of corporate passwords (NTLM hashes) of the Windows domain of the company, PayPal accounts and passwords for the company, internal only documents, and a ton more. The biggest indicators to legitimacy comes from these internal documents, much containing sensitive internal data relating to the server infrastructure, org charts, and more. This is much more problematic as its not just a database dump, this is a full scale compromise of the entire companies infrastructure including Windows domain and more.
So far, it looks like around 33 million usernames, first names, last names, street addresses, and more are impacted by this breach.
The dump itself - 10 gigs COMPRESSED. For folks that may not know, that is massive. Huge.
The site is known as a popular meeting online meeting ground for people seeking extra-marital affairs. The description on their homepage reads:
"Ashley Madison is the most famous name in infidelity and married dating. " and also includes this line: "Thousands of cheating wives and cheating husbands signup everyday looking for an affair. We are the most famous website for discreet encounters between married individuals. Married Dating has never been easier. "
Impact Team also posted this message to go along with data dump:
"Avid Life Media has failed to take down Ashley Madison and Established Men, We have explained the fraud, deceit, and stupidity of ALM and their members. Now everyone gets to see their data.... Keep in mind the site is a scam with thousands of fake female profiles. See ashley madison fake profile lawsuit; 90-95% of actual users are male. Chances are your man signed up on the world's biggest affair site, but never had one. He just tried to. If that distinction matters."
