An adult sexting site exposed thousands of models’ passports and driver licenses
A popular sexting website has exposed thousands of photo IDs belonging to models and sex workers who earn commissions from the site.
SextPanther, an Arizona-based adult site, stored more than 11,000 identity documents on an exposed Amazon Web Services (AWS) storage bucket, including passports, driver licenses and Social Security numbers, without a password. The company says on its website that it uses these documents to verify the ages of models with whom users communicate.
Most of the exposed identity documents contain personal information, such as names, home addresses, dates of birth, biometrics and their photos.
Although most of the data came from models in the U.S., some of the documents were supplied by workers in Canada, India and the United Kingdom.
The site allows models and sex workers to earn money by exchanging with paying users text messages, photos and videos, including explicit and nude content. The exposed storage bucket also contained more than 100,000 photos and videos sent and received by the workers.
It was not immediately clear who owned the storage bucket. TechCrunch asked U.K.-based penetration testing company Fidus Information Security, which has experience in discovering and identifying exposed data, to help.
Researchers at Fidus quickly found evidence suggesting the exposed data could belong to SextPanther.
An hour after we alerted the site’s owner, Alexander Guizzetti, to the exposed data, the storage bucket was pulled offline.
“We have passed this on to our security and legal teams to investigate further. We take accusations like this very seriously,” Guizzetti said in an email, who did not explicitly confirm the bucket belonged to his company.
Using information from identity documents matched against public records, we contacted several models whose information was exposed by the security lapse.
“I’m sure I sent it to them,” said one model, referring to her driver license, which was exposed. (We agreed to withhold her name given the sensitivity of the data.) We passed along a photo of her license found in the exposed bucket. She confirmed it was her license, but said that the information on her license is no longer current.
“I truly feel awful for others whom have signed up with their legit information,” she said.
The security lapse comes a week after researchers found a similar cache of highly sensitive personal information of sex workers on adult webcam streaming site, PussyCash.
More than 850,000 documents were insecurely stored in another unprotected storage bucket.
Read more:
Got a tip? You can send tips securely over Signal and WhatsApp to +1 646-755–8849.
A popular sexting website has exposed thousands of photo IDs belonging to models and sex workers who earn commissions from the site. SextPanther, an Arizona-based adult site, stored more than 11,000 identity documents on an exposed Amazon Web Services (AWS) storage bucket, including passports, driver licenses and Social Security numbers,…
Recent Posts
- Microsoft is mulling a change for widgets in Windows 11 that could prove controversial
- What to look for in your first turntable in 2024
- ICYMI: the 8 biggest tech news stories from Boston Dynamic’s new robot to Sony’s OLED-beating Micro-LED TV tech
- Obscure $10 billion chip firm you never heard of finally delivers crucial tech for AI future — Astera Labs showcased its Aries 6 PCIe retimer board as it targets future Nvidia HGX boards
- Controversial US surveillance program (briefly?) lapses amid congressional dysfunction
Archives
- April 2024
- March 2024
- February 2024
- January 2024
- December 2023
- November 2023
- October 2023
- September 2023
- August 2023
- July 2023
- June 2023
- May 2023
- April 2023
- March 2023
- February 2023
- January 2023
- December 2022
- November 2022
- October 2022
- September 2022
- August 2022
- July 2022
- June 2022
- May 2022
- April 2022
- March 2022
- February 2022
- January 2022
- December 2021
- November 2021
- October 2021
- September 2021
- August 2021
- July 2021
- June 2021
- May 2021
- April 2021
- March 2021
- February 2021
- January 2021
- December 2020
- November 2020
- October 2020
- September 2020
- August 2020
- July 2020
- June 2020
- May 2020
- April 2020
- March 2020
- February 2020
- January 2020
- December 2019
- November 2019
- December 2011