By now, we’ve all heard of the latest in cyber attacks; personal information from infidelity dating website Ashley Madison was stolen by hackers who have since threatened to expose its 37 million users.
However, information about what exactly was stolen – such as credit card information or social security numbers – is still a bit hazy. Ashley Madison customer service has, according to news website Inquisitr, provided customers with conflicting information about what was subject to the hack, namely because they don’t know what was stolen and sold or given to third parties. Some customers have been told that credit card numbers weren’t hacked, but others were told that third party credit card data was indeed hacked.
A few websites have emerged to help customers see if their personal data has been leaked, including a site “Was he on Ashley Madison,” (WasHeOnAshleyMadison.com). Customers of Ashley Madison and also of hacked website Adult Friend Finder could search through emails to see if theirs were compromised. However, as of July 31, that website was put up for sale, and quickly bought by someone looking to make a statement to users of Ashley Madison and Adult Friend Finder. Hours later, what appears to be a former Ashley Madison user posted a statement lashing out against the company, including this paragraph to those who were hacked:
“You have been through enough pain and anger and anxiety about their hack without having some opportunistic scammer buy this domain and charge you money for data they do not have.
I have decided that I am going to fight the AM people so I can keep this domain. They have refused to offer any of their customers any kind of solace or at least a year of identity theft protection which is standard practice when your data is hacked. They prefer to sit in their ivory tower and hide behind their lawyers.
This is not OK with me and it should not be OK with you.”
According to Inquisitr, there have been many sites claiming to provide information for those who feel their personal information could have been hacked, but many of these sites have been nothing but spam themselves. According to an investigation by BBC, Ashley Madison users were sent emails providing links to third party websites, supposedly with information about the hack. Some included the recipient’s Ashley Madison user name, giving more credence to the email, but worrying customers that their information was indeed sold to a third party. However, when people clicked on the links, they were sent to spam sites that were booby-trapped with malware and, in some cases, graphic images and videos of adulterers ‘burning in hell.’
Now Ashley Madison users are turning to Reddit to provide current information about the hack to other users in an attempt to gain information.
One Reddit user claimed that Ashley Madison sold user information to third party sites from the beginning, because that user began getting spam emails as soon as he/she signed up on the website. While it's difficult to tell where exactly information has gone, it has been compromised. We'll see what Ashley Madison does next to address the issue.