xHamster Data Breach

What happened

In November 2016, news broke that hackers were trading hundreds of thousands of xHamster porn account details. In total, the data contained almost 380k unique user records including email addresses, usernames and unsalted MD5 password hashes.

Exposed data

Recommended actions

• Change your xHamster password immediately, and update it anywhere you reused the same password.
• Enable two-factor authentication on the affected account and on your critical services (email, banking).
• Watch for targeted phishing emails referencing xHamster — attackers weaponise breach data quickly.
• Check whether your email address appears in this breach on haveibeenpwned.com.