Underground porn website The Candid Board became famous after its member data leaked online due to a configuration problem that affects the database.
Thousands of The Candid Board Users Have Their Data Leaked
The underground porn site known as The Candid Board has been featured in several alerts, as it’s database data was leaked due to a problem in the server’s configuration. Thousands of its paying users now have their private data public on the internet.
The Candid Board is an imageboard type of site that is used to share upskirt porn and related discussions. This genre relies on sharing adult content about girls and women who appear to be unaware that they spied upon. The contents of the leak includes 178 201 email addresses, account credentials with hashed passwords, dates of birth and IP addresses. Other related data is also used such as the last post date, user-managed reputation and join date.
The sites requests a subscription fee of 19.99 US Dollars per month for access. The data leak does not contain any related financial data such as payment card information. According to the released reports the details account for information as early as September 2015. Among the emails there are 70 military and 19 government addresses.
Security experts have confirmed that a sample of the leaked credentials are legitimate. The paying members have provided accurate email addresses and birth dates among other types of personal data.
It is possible that the administrators of the image board operate other similar sites. A separate leak from another service called NonNudeGirls contains similar contents and the security suspect that they are operated by the same collective. Both of these enterprises are being run by a company called Green Arrow Media and registered in Cyprus.
Both of these sites use a generic design which is attributed to companies that usually distribute content of dubious origin.