Use the porn site Brazzers? Your details could've been leaked online

At least 790,724 unique email addresses and passwords for the porn site Brazzers have been exposed online, Motherboard reports. The details, provided by the data breach-monitoring site Vigilante.pw apparently came from an accompanying user forum, "Brazzersforum," rather than Brazzers itself.

According to the site Have i been pwned?, run by security analyst Troy Hunt who also helped confirm the breach, each record in the dataset included a username, email address and password stored in plain text. Storing in plain text means the details were just there for the taking.

Spokesperson for Brazzers, Matt Stevens told the publication the details match an incident that occurred on the third party-managed forum in 2012. Brazzersforum.com currently says it is "under construction."

"The incident occurred because of a vulnerability in the said third party software, the 'vBulletin' software, and not Brazzers itself," Stevens said. "That being said, users accounts were shared between Brazzers and the 'Brazzersforum' which was created for user convenience. 

"That resulted in a small portion of our user accounts being exposed and we took corrective measures in the days following this incident to protect our users."

vBulletin is a forum-publishing software based in El Segundo, California, according to its website. It announced it had released the latest version of vBulletin, v5.2.3, in August on Facebook.

As Hunt noted to Motherboard, sites using vBulletin have been hacked before on sites where it has been left to fall into disrepair.  

"Vulnerabilities have been found and patches have been issued yet the admins have maintained the product and very well-known, easily exploited vulnerabilities have led to breaches like this one," he said.

You can check Have i been pwned? to see if your details were included in the dump. If you use the site, best to go along and change your password like, right now and consider using a unique email address.