Adultery website Ashley Madison hacked in shutdown bid

Posted on July 20, 2015


New update (8/18) Hackers Release Identities of Ashley Madison Users One Month After Security Breach users better be prepared for this news.

The same hackers who threatened to expose the identities of more than 37 million cheaters last month appeared to have followed through with their promise.

According to the New York Times, the hackers dumped 9.7 gigabytes worth of stolen user account and payment information online this week. The data includes email addresses, transition details and passwords for members of Ashley Madison.

For those unfamiliar, the website is used for individuals looking to have an affair. Established Men, another site that markets to women looking to date wealthy men, is also affected.

Both sites are owned by Avid Life Media who assured users last month that they were able to “secure” its sites and “close the unauthorized access points.”

“We were recently made aware of an attempt by an unauthorized party to gain access to our systems. We immediately launched a thorough investigation utilizing leading forensics experts and other security professionals to determine the origin, nature, and scope of this incident,” the company said in its initial statement to E! News. “We apologize for this unprovoked and criminal intrusion into our customers’ information.”

The company added, “We have always had the confidentiality of our customers’ information foremost in our minds, and have had stringent security measures in place.”

The Impact Team, who claim to be the hackers, says they are most upset that Ashley Madison promised users that they could delete their information. Forbes later reported, however, that it may not be possible.

“Users almost always pay with credit card; their purchase details are not removed as promised, and include real name and address, which is of course the most important information the users want removed,” they wrote per the publication.

Avid Life Media said it was still investigating the validity of any information posted online from its site.

“This event is not an act of hacktivism, it is an act of criminality,” the company said in a statement to the New York Times. “It is an illegal action against the individual members of, as well as any free-thinking people who choose to engage in fully lawful online activities. The criminal, or criminals, involved in this act have appointed themselves as the moral judge, juror, and executioner, seeing fit to impose a personal notion of virtue on all of society.”

They added, “We will not sit idly by and allow these thieves to force their personal ideology on citizens around the world. We are continuing to fully cooperate with law enforcement to seek to hold the guilty parties accountable to the strictest measures of the law.”

Below is the original article ===

by Bradley Matthews, Editing by Alex JS

WASHINGTON (AFP) – Hackers breached the online adultery website Ashley Madison and threatened to expose data on users in an effort to shut down the service which claims millions of members worldwide.

Avid Life Media, which owns Ashley Madison, said in a statement Monday an “unauthorized party” was able to gain access to the data through various unauthorized points on the website.

A group calling itself “the Impact Team” claimed responsibility and said it was part of an effort to shut down Ashley Madison, known for its slogan, “Life is short. Have an affair.” The group, in statements posted online, said that Ashley Madison and a related site called Established Men “must shut down immediately permanently.” “Shutting down AM and EM will cost you, but non-compliance will cost you more,” the statement said.


“We will release all customer records, profiles with all the customers’ sexual fantasies, nude pictures, and conversations and matching credit card transactions, real names and addresses.”


Avid Life, which is based in Canada, said some personally identifiable information was posted online before being removed.

“Our team has now successfully removed the posts related to this incident … about our users published online,” Avid Life Media said.

“At this time, we have been able to secure our sites, and close the unauthorized access points,” the company said.

“We apologize for this unprovoked and criminal intrusion into our customers’ information.” Ashley Madison, which boasts more than 33 million users, helps people who are in relationships cheat on their partners. With its other dating services, Avid Life says it is Canada’s largest dot-com with some 40 million members.

It said it has “stringent security measures in place, including working with leading IT vendors from around the world.” “These security measures have unfortunately not prevented this attack to our system,” Avid Life added.

The company said it is working with law enforcement over the breach and that those responsible for the “act of cyber-terrorism will be held responsible.” Users in more than 46 countries subscribe to the cheating website, which was founded in 2001.

The Canada-based company said a new user joins every six seconds, and that it is “the world’s largest website for married men and women looking to have a discreet affair.” The incident is the latest in a series of high-profile data breaches affecting companies as well as government databases.

It comes two months after a leak of stolen data from 3.9 million members of Adult FriendFinder, which claims to be “”the world’s largest sex and swinger” community.

Toronto-based Avid Life said recently it was considering a stock flotation to help grow the business, which also includes the website for women called Cougar Life, aimed at the “recently divorced, single mom or sexy single still on the prowl.”

Avid Life chief executive Noel Biderman told security blogger Brian Krebs the company was close to identifying the source of the breach.

“It was definitely a person here that was not an employee but certainly had touched our technical services,” he was quoted as saying.