This article is from the source 'rtcom' and was first published or seen on . It last changed over 40 days ago and won't be checked again for changes.

You can find the current article at its original source at https://www.rt.com/news/472546-camgirl-site-data-exposed/

The article has changed 3 times. There is an RSS feed of changes available.

Version 0 Version 1
'Camgirl' site network exposes data of millions of users and sex workers, including plaintext logins - report ‘Camgirl’ site network exposes data of millions of users and sex workers, including plaintext logins – report
(32 minutes later)
Several popular “camgirl” sites have exposed the email addresses and other sensitive information of millions of users and sex workers after a backend was left wide open.Several popular “camgirl” sites have exposed the email addresses and other sensitive information of millions of users and sex workers after a backend was left wide open.
VTS Media, a company based in Barcelona, runs the affected sites, out of which amateur.tv is one of the most popular cam sites in Spain, according to traffic-ranking service Alexa.  Others include placercams.com and webcampornoxxx.net.  VTS Media, a company based in Barcelona, runs the affected sites, out of which amateur.tv is one of the most popular cam sites in Spain, according to traffic-ranking service Alexa. Others include placercams.com and webcampornoxxx.net. 
This data exposure does not come at the hands of any sort of hack or exploit—instead, just an oversight by the company, TechCrunch reported. The administrative backends were left open, without a password, for several weeks. This allowed anyone to access the network's database, which included usernames, email addresses, IP addresses, browser user-agents, private chat logs, login timestamps, and even failed login attempts, which stored attempted passwords in plaintext.This data exposure does not come at the hands of any sort of hack or exploit—instead, just an oversight by the company, TechCrunch reported. The administrative backends were left open, without a password, for several weeks. This allowed anyone to access the network's database, which included usernames, email addresses, IP addresses, browser user-agents, private chat logs, login timestamps, and even failed login attempts, which stored attempted passwords in plaintext.
The backend also contained data related to the videos that registered users were watching and renting. Users who broadcasted sexual content to viewers on these sites also had some of their personal information revealed.The backend also contained data related to the videos that registered users were watching and renting. Users who broadcasted sexual content to viewers on these sites also had some of their personal information revealed.
The exposed database was discovered by researchers at a cybersecurity firm, Condition:Black. "This was a serious failure from a technical and compliance perspective. After reviewing the sites’ data-privacy policy and terms and conditions, it’s clear that users likely had no idea that their activities were being monitored to this level of detail," said John Wethington, the company’s founder, according to TechCrunch.The exposed database was discovered by researchers at a cybersecurity firm, Condition:Black. "This was a serious failure from a technical and compliance perspective. After reviewing the sites’ data-privacy policy and terms and conditions, it’s clear that users likely had no idea that their activities were being monitored to this level of detail," said John Wethington, the company’s founder, according to TechCrunch.
Both VTS Media and the servers for the adult webcam sites it operates are located in Europe, which opens this matter up to action related to General Data Protection Regulation (GDPR) violations. The European Union has received more than 95,000 GDPR-related complaints since May 2018, when it came into effect.Both VTS Media and the servers for the adult webcam sites it operates are located in Europe, which opens this matter up to action related to General Data Protection Regulation (GDPR) violations. The European Union has received more than 95,000 GDPR-related complaints since May 2018, when it came into effect.
With millions of users affected, this is one of the largest data exposures for adult sites since Ashley Madison’s massive breach in 2015. At that time, around 32 million cheating spouses had their information revealed in a leak that included 25 gigabytes of personal data.With millions of users affected, this is one of the largest data exposures for adult sites since Ashley Madison’s massive breach in 2015. At that time, around 32 million cheating spouses had their information revealed in a leak that included 25 gigabytes of personal data.
The database containing this information was made inaccessible at an undisclosed time last week, although all VTS Media websites remain online.The database containing this information was made inaccessible at an undisclosed time last week, although all VTS Media websites remain online.
If you like this story, share it with a friend!If you like this story, share it with a friend!