YouPorn data breach: what leaked and what to do

YouPorn (youporn.com) had a data breach on 2012-02-21 affecting 1,327,567 accounts. Passwords were involved.

Passwords leaked Sensitive

Added to the catalogue 30 July 2015.

What leaked

  • Email addresses
  • Passwords

What happened

In February 2012, the adult website YouPorn had over 1.3M user accounts exposed in a data breach. The publicly released data included both email addresses and plain text passwords.

Description from Have I Been Pwned, in its words.

What to do

  • Change the password on that service, and anywhere you used the same password. A password manager makes this painless.
  • Turn on two-factor sign-in on that service and on your email.
  • Warn staff: emails, texts or calls quoting leaked details are not proof the sender is genuine.
  • If card or bank details leaked, watch statements and tell the bank; if identity documents leaked, consider a credit ban or alert.

The full guide: a staff email appears in a breach

Common questions

What leaked in the YouPorn breach?

Email addresses, Passwords

When did the YouPorn breach happen?

The breach date is 2012-02-21; it was added to the public catalogue on 2015-07-30.

What should I do if my staff used this service?

Change the password there and anywhere it was reused, turn on two-factor sign-in, and warn staff about emails quoting the leaked details.

Was a staff address in this breach?

Check one address free, no storage. Breach Watch checks every staff address after each new breach.