Popular adult cam site StripChat was found to have a public database accessible from the internet. Comparitech researcher Volodymyr Diachenko discovered the open database on November 5th, one day after it was crawled by search engines. The database appeared to be an Elasticsearch cluster with multiple databases used by StripChat to hold information on its users as well as the models on the site. The leaked databases include: a user database with email addresses, usernames, and IP addresses, a model database with usernames, a transaction database with information on tokens and tips that were paid to models, and finally a moderation database containing public and private messages sent to models. In total, the database contained 65 million users, 421 thousand models, 134 million transactions, and 719 thousand chat messages. Diachenko warns that this information, particularly the IP addresses which could approximate a model’s location, can be used to stalk or harass users of the site. Because of the information contained in the breach, StripChat may be liable for a fine based on the GDPR regulations. This is the third major cam site to suffer a breach, following Cam4 in May 2020, and PushyCash in January 2021. CTAPT analysts are monitoring dark web and underground sources where this data may be leaked to.