AbbyWinters

In March 2016 the Australian adult website AbbyWinters suffered a significant data breach affecting approximately 435 thousand registered members. The incident involved an unauthorized access to the user database resulting in the exposure of sensitive account details. The leaked information included member email addresses and usernames along with passwords stored as salted Haval-256 hashes. Security researchers identified the vulnerability as a result of outdated cryptographic practices and potential SQL injection flaws. The data was later circulated in various darknet forums and breach repositories posing a high risk of credential stuffing attacks for users who reused their login credentials across multiple platforms.