Several sources are reporting a major data breach has taken place at Stripchat, where more than 200 million webcam models and users’ information has been exposed.

A database that contains highly sensitive information on both users and models was discovered online, left completely unprotected.

The data exposure puts both their models and their customers at risk of harassment, extortion, or even violence.

Volodymyr “Bob” Diachenko, head of security research Comparitech, reported that he discovered the database on an Elasticsearch cluster on November 5th. He said that the file contacted about 200 million Stripchat records, including 65 million user records containing email addresses, IP addresses, the amount in tips they gave to models, a timestamp of when the account was created, and the last payment activity.

Another database contained about 421,000 records for the platform’s models, including their usernames, gender, studio IDs, tip menus and prices, live status, and what is called their “strip score.”

As far as we know there were no credit card numbers in the data breach, only personal data, and transaction details (date, time, amount, etc.).

The information was locked down two days later, but that still leaves 48 hours of exposure to who knows how many people with possible nefarious purposes.

In addition to the personal data leak on webcam models and their customers, we learned that 719,00 chat messages were exposed. Although these appear to be public chat room data, nothing from private messages between a custom and a model.

“Victims should be on the lookout for targeted phishing emails from fraudsters posing as Stripchat or a related company,” Diachenko warned. “Never click on links or attachments in unsolicited emails.”

The problem with this kind of data leak, even if only a little bit of information about a person is exposed, it can be used to cross-reference information about a person from other breaches on other sites. When you get a little bit of information about a person here, a little bit about them there, over time it really starts to become quite significant.

If you are a webcam model or a custom on the Stripchat website, the first thing you should do is update your password and other login details. Also, be on the lookout for scammers coming at you trying to get more details about you via email or making threats, saying they have your information. This is known as phishing, where they tell you just a little bit to get you to reveal more. Don’t fall for it.