Adult livestreaming website CAM4 exposes 10B+ records, including names, sexual orientations, payment logs, and email transcripts, on an unsecure database
CAM4 has taken the server offline, but not before it leaked 7TB of user data. — It's all too common for companies to leave databases chock full … Tweets: @lanceulanoff and @wired Tweets: Lance Ulanoff / @lanceulanoff : This site bared all. 🤦♂️ https://twitter.com/... @wired : CAM4 is a popular adult platform that advertises “free live sex cams.” And it leaked out data comprising 7 terabytes of names, sexual orientation, payment logs, email and chat transcripts—10.88 billion records in all. https://www.wired.com/...
Context & Ripple Effects
CAM4's exposure is not a hack but a misconfigured database left open — the same failure mode as PussyCash's exposed S3 bucket of model government IDs in January, and a step beyond Luscious's exposed user data in scale by four orders of magnitude.
The adult sector has now logged a decade of mass exposures, from the 2015 Adult FriendFinder breach of 3.9M users to the 412M-account FriendFinder Networks hack, with the OnlyFans content leak in March showing the pattern extends beyond account databases to the content itself.
First-order effects
- Users whose names, sexual orientations, payment logs, and chat transcripts were exposed face concrete blackmail and outing risk — the most sensitive data combination yet in this series of leaks.
- CAM4 has pulled the server offline, but the 7TB is already indexed by security researchers, and the company now faces potential regulatory action in jurisdictions treating sexual-orientation data as a special category.
Second-order effects
- Competing cam networks PussyCash and Luscious, both recent leakers themselves, face heightened scrutiny of their own storage practices as researchers and journalists now treat adult-platform databases as a systematically under-secured beat.
- Payment processors and advertisers attached to adult livestreaming gain fresh evidence for demanding security attestations from platforms, since payment logs sitting in an open database implicate the financial side, not just the site.
Third-order effects
- The pattern — FriendFinder, Brazzers, Luscious, PussyCash, now CAM4 — points toward adult platforms being held to a distinct regulatory standard for sexual-orientation and payment data, with unsecured-database exposure treated as negligence rather than bad luck.
- If sensitive-data breaches keep originating from configuration errors rather than intrusions, the industry's competitive axis shifts toward verifiable data-handling practices, and platforms that cannot demonstrate them become the sector's liability outliers.
The trend: Adult-platform data exposure is shifting from episodic hacks to a systemic pattern of misconfigured storage, pushing the sector toward regulation of sexual-orientation and payment data as a special class.