Is the leak of 340 million OnlyFans accounts real? Expert warnings and the truth

The internet community and international cybersecurity circles are closely watching reports of a hacker group claiming to sell a massive database containing approximately 340 million OnlyFans accounts. This incident has raised deep concerns over the risk of exposing the real identities of millions of content creators and fans on the platform, despite the operating company's swift denial.

Suspected data leak from a highly private platform

The incident began when a hacker group posted on a well-known underground cyber forum, claiming to possess an internal database containing personal details and detailed activity histories of over 340 million OnlyFans accounts.

Hacker puts OnlyFans account up for sale.

For a platform with sensitive content like OnlyFans, anonymity and privacy are top priorities for users. Currently, the platform boasts a massive scale, with nearly 380 million users and over 4.5 million content creators. While most famous for adult content (18+), the platform is actively diversifying its audience by expanding into mainstream niches such as music, cooking, fitness, and art. Consequently, news of a potential large-scale data breach immediately triggered a wave of public concern.

Details of the alleged stolen data and official responses

According to the hackers, the data up for sale is highly detailed, allegedly including usernames, account registration dates, email addresses, follower counts, like counts, the number of photos and videos, live streams, linked social media profiles, and even user payment card information.

However, the authenticity of this database was quickly called into question. Upon preliminary investigation, cybersecurity experts from Cybernews reported they could only access 10 sample records provided by the hackers. Based on the available evidence, the expert team estimated that the data was likely gathered around August 2025.

The list of information that hackers are selling is very detailed

Interestingly, the hackers themselves admitted they did not directly breach OnlyFans' servers. Instead, they claimed this database was compiled by aggregating data from previous OnlyFans leaks, combined with public sources and data stolen from breaches on other platforms. OnlyFans' representatives quickly issued an official response, firmly stating that the reports of the data leak are completely false.

The hidden danger of data cross-referencing

While the true scale and legitimacy of the leak are still under investigation, security experts are issuing serious warnings to users. Even if this turns out to be an aggregated set of old, recycled data, the risk to account holders remains high.

Experts analyze that hackers can use the collected email addresses to cross-reference them with data leaked from more mainstream, less sensitive services (such as Spotify or Netflix). Through this filtering technique, malicious actors could easily uncover users' real identities, phone numbers, or physical addresses. This serves as a dangerous stepping stone for bad actors to launch targeted phishing campaigns, extortion, or direct harassment against content creators.

Although OnlyFans has denied any server breach, this incident serves as a stark reminder of the critical importance of safeguarding personal information online. Staying vigilant and enforcing strict account security are vital steps for every user to protect themselves against increasingly sophisticated data exploitation tactics.

(Information compiled based on reports from TechRadar and VietnamNet)