Hacker Lists 340M OnlyFans User Records for Sale

## Executive Summary A threat actor advertised a purported 340 million-record OnlyFans database for sale containing usernames, emails, phone numbers, profile metrics and partial payment-card fields; however, review by researchers found only small recycled samples and many incomplete or public-profile-derived entries, so the claim’s scope and originality are unverified. Despite weak evidence for the full-size breach, exposed email and profile linkages could enable doxxing, phishing, impersonation, or extortion against users.