Ashley Madison Hacked - User profiles exposed

[Equity Market investor]

Never been on Ashley's website and don't plan to anytime soon lol. But, is there much of a difference between that site and Perb ? Im mean, really?

It boils down to the same thing when all said and done. No?

 

[Fire69]

By the way, to put this breach in scale, in the 10km area around where I live, I have found data for 38 people that paid for services from A.M. The number of users that have regular (unpaid) accounts within about 10km of me number in the many hundreds - and I live in a relatively sparely populated area... when the dust settles I would say the national numbers could be as high as 1 in 50 homes have someone with an account, and about 1 home in 2000 paid for services from the site, but I will have to wait until the query finishes before I know more.

How are you able to do that search??

 

[Fire69]

Dont know how I should feel. Couple years ago I used my personal email to just sign up to browse and see what it was all about, didn't use that account to pay. This past year I thought I would try it out and used a fake yahoo email but made a payment for credits once (yes met someone out of it who gave amazing BJ a few times but NEVER had sex....irrelevant). Both of those emails are showing up on http://www.trustify.info/check and https://ashley.cynic.al/ but NOT on https://haveibeenpwned.com/

My wife does not suspect this activity and she barely knows how to log in to check her own gmail account. I am just pissed with myself that I used my personal email the first time so anyone who knows that email can search it and see that it was used.

Dont know how much info is released from this on my credit card payment.....Hoping for some encouragement but I am sure none of you are going to provide that LOL, maybe some FRIENDLY advice?? YES now looking back it was dumb but myself and MILLIONS others thought it was safe apparently, I get it now.

I never used my real name in my profile the only time I believe I used my name was on the payment page.

My "personal" email that I mentioned is rarely used as for the past 8 years I have only given out my work email (NOT used on AM), not even sure my wife knows that email.......I mainly use it as a sign up email when you need an email to enter, I dont think Ive actually received an actual personal email for years at that address......

 

[hornygandalf]

Why, why, why does the Trustify site have buttons to announce on Facebook and Twitter that your email is not compromised and you aren't on the list? Are you really likely to check if you haven't ever visited the site? And wouldn't announcing to the world that you aren't on the list raise questions as to whether you did visit it at some point, possibly under another email address?
This one seemed really strange to me...

 

[dkong]

How are you able to do that search??

To find the number of people who paid in my area, I using Splunk on the credit card processing logs, searching for unique addresses within same three digit post code, then narrowing it down from there. (I already know how many houses are in the town where I live).

For overall totals its a simple sql query of the member database, counting the number of canadian accounts with unique addresses (which is proving to be a very big search) and factoring in that there are 13m households in canada.

 

[Cock Throppled]

Please, please let there be a shit load of Conservative MP's on AM.

Plus Peter McKay.

 

[Oldfart]

One thing I heard that is most tragic: some of the users were young men from Arab countries who were in North America as students, and were using AM to find gay dates. If these guys are outed, they could be killed by religious zealots.

 

[uncleg]

Please, please let there be a shit load of Conservative MP's on AM.

Plus Peter McKay.

Alright, kinky.......though I'd rather find his wife there, but unto each their own.

 

[Caramel]

I wouldn't trust that http://www.trustify.info website that you're all talking about

I entered my e-mail address in there, my mom (who is divorced and in her mid-50's and has gone through menopause - was just having fun sorry mom!), and it came up as telling me that those e-mails were in there. I've NEVER used any of these sites. Maybe e-mails were hacked I thought. But then I used these random finger keyboard generated e-mail addresses:

fhweut94utjwgrjkefbf4@ei4l;w'44g5g.com
efk90tjdlg@eg-4kv,e4v555g5f5....com

and those also were checked as being in the system. So I decided to just type in random words, like "meow meow meow"

As you can see, this website is probably just a fake BS site, an information stealer, it will probably collect info and sell it to others or harrass you with ads and offers etc.

 

[Classic]

So I used a secret email which is now closed, used a fake name but did use a legit CC to pay. That CC # is now changed so I eliminated that fraud risk and the SO is barely aware it exists and has an address for another city.

So in the breach, I understand it only holds partial CC numbers as the payment system is separate to AM. So are the names on the data dump associated with the real CC or the identity the user entered?

Chances of my SO investigating is virtually zero, but the remaining fear is blackmail type scenarios. I wonder if a searchable DB will ever be made available to enter actual names. That could get messy.

 

[PierreCoeur]

Any way of doing a * all string search?

 

[bcneil]

I have never used Ashley Madison. But I have to assume its mostly males like the other ones?
So it has to be single men too....they can't pretend they are cheating on their spouse as well?

I was on lavalife several years ago, I made an email account just for it and to give to ladies on the site.
Married people are going to use their primary email to sign up on a cheating site??

 

[Curiousgeorge604]

I wouldn't trust that http://www.trustify.info website that you're all talking about

I entered my e-mail address in there, my mom (who is divorced and in her mid-50's and has gone through menopause - was just having fun sorry mom!), and it came up as telling me that those e-mails were in there. I've NEVER used any of these sites. Maybe e-mails were hacked I thought. But then I used these random finger keyboard generated e-mail addresses:

fhweut94utjwgrjkefbf4@ei4l;w'44g5g.com
efk90tjdlg@eg-4kv,e4v555g5f5....com

and those also were checked as being in the system. So I decided to just type in random words, like "meow meow meow"

As you can see, this website is probably just a fake BS site, an information stealer, it will probably collect info and sell it to others or harrass you with ads and offers etc.

It's real, sorry bud.

Those emails come up as not compromised, BTW...

 

[felixthecat]

It's real, sorry bud.

Why do you call her "bud"?

But I agree those emails come as not compromised on my computer too.

 

[Caramel]

It's real, sorry bud.

Those emails come up as not compromised, BTW...

you're right! Its working now, I figured it may have been a bug yesterday...hopefully, a little relieved now hopefully my mom and I won't be bombarded with more spam...but I wonder how often that bug happens, I posted a screenshot of it telling me random words came up as compromised, that shot was just from the words not the fake .coms too ...hmmm

 

[Caramel]

Why do you call her "bud"?

But I agree those emails come as not compromised on my computer too.

its okay, I don't mind

 

[Curiousgeorge604]

its okay, I don't mind

Oops, didn't look closely enough and just assumed you were male.

I've looked at the actual data in the dump files and compared it with these web sites. It's real.

 

[badbadboy]

Two suicides in the UK recently attributed to this back.

http://www.bbc.com/news/technology-34044506

I checked my old AM email address used this past weekend and found a ton of recent spam.

All of them were hook up type emails. Thing is it was only used for AM. Guess mine was leaked too?

 

[hornygandalf]

My reading of that BBB was that the suicides were in Toronto, and were apparently of two people associated with the hack and release of the data.
So, sounds like these are Canadian hackers who pulled this off (the parent company of Ashley Madison is Canadian).

 

[clu]

My reading of that BBB was that the suicides were in Toronto, and were apparently of two people associated with the hack and release of the data.
So, sounds like these are Canadian hackers who pulled this off (the parent company of Ashley Madison is Canadian).

I watched the full 30+ min raw press event that this info came from (bored while waiting for a delivery) and Evans provided absolutely no details or anything to infer one way or another who committed suicide, why or where, other than it was in some way a consequence of the hack. He only brought it up to illustrate that the hack had social consequences. It didn't even sound like he knew himself. So don't read anything into the way that BBC article phrased it. They have absolutely no details.