Ashley Madison hackers reveal names of cheaters
Loading...
| London
Hackers claim to have leaked a massive list of users from Ashley Madison, a matchmaking website for cheating spouses, saying its owners had refused to bow to their demands to close the site.
A message posted online said "Time's Up!" and accused parent company Avid Life Media of deceit and incompetence.
"Now everyone gets to see their data," the statement said.
Toronto-based Avid Life Media, Inc. said in a statement Tuesday that it was aware of the claim and was investigating.
"The criminal, or criminals, involved in this act have appointed themselves as the moral judge, juror, and executioner," the company said.
The Associated Press wasn't immediately able to determine the authenticity of the leaked documents, but several security analysts who have scanned the data say they believe the dump is genuine.
One of them, TrustedSec CEO Dave Kennedy, said the dump included full names, passwords, street addresses, credit card information and "an extensive amount of internal data."
In a blog post, he said it seemed the hackers had access to Ashley Madison "for a long period of time."
Errata Security CEO Rob Graham said he had counted more than 36 million accounts, although many appeared to be bogus. The overwhelming majority of the users were male, he said in a separate blog post.
The hackers' motives aren't entirely clear, although they have accused Ashley Madison of faking female profiles to keep male users interested. In its statement, Avid Life Media (ALM( accused the hackers of seeking to impose "a personal notion of virtue on all of society."
In July, media reports indicated that the hackers, who identified themselves as The Impact Team, criticized ALM for continuing to store user data after an account is deleted, and called the users themselves 鈥渃heating dirtbags.鈥 The Impact Team threatened to release client names if ALM did not permanently shut down Ashley Madison and another dating site it owns, Established Men.
As 海角大神 reported, the hack was seen by some as a kind of moral vigilantism. Others saw it more as blackmail or cyberterrorism.聽
鈥淭his one is more like 鈥榟acktivism鈥 to me,鈥漃aul Williams, chief technology officer of security consulting company White Badger Group. 鈥淚t is definitely black hat, but it鈥檚 like Robin Hood robbing from the rich to give to the poor. In this case, these guys are doing a very ugly hack that鈥檚 blatantly against the law, but in the name of doing something good. So it鈥檚 kind of like a crossover of hacktivism and, of course, black hat.鈥
D.E. Wittkower, assistant professor of philosophy at Old Dominion University whose research involves the legal invocation of property rights to protect privacy, adds that since The Impact Team鈥檚 motivation is about morality 鈥 not aiding the company in boosting security or promoting criminal activity 鈥 even the more ambiguous 鈥済ray hat鈥 label聽does not fit quite right.
Instead, he says he favors ALM鈥檚 claim that the hack is an act of 鈥渃yber-terrorism.鈥 The term, he says, 鈥渋n some sense, seems way overblown, but as a factual description I think might be pretty accurate, because what they鈥檙e trying to do is to utilize fear in order to bring about a change in company policy.鈥
A call to Avid Life Media wasn't immediately returned. The hackers didn't immediately return messages.