On May 25, 2026, claims of a massive OnlyFans data leak exploded across X (formerly Twitter), with a viral post alleging that 340 million records tied to creators and subscribers were being sold on dark web marketplaces for 0.313 BTC (approximately $76,000). The claimed dataset supposedly includes usernames, email addresses, phone numbers, profile metrics, linked social media accounts, and partial payment card metadata.

Why It Matters

Even unverified data leak claims create real harm for OnlyFans creators and subscribers. The viral spread of the allegations will drive phishing campaigns, credential-stuffing attacks, and sextortion attempts regardless of whether the underlying data is genuine. For the platform, the timing couldn't be worse — just weeks into the Architect Capital investment that was supposed to signal institutional maturity. The episode underscores that adult platforms face an asymmetric threat landscape where even fabricated breach claims can cause disproportionate reputational and personal damage.

There is, however, no solid evidence that OnlyFans itself was breached. Cybersecurity publication Hackread reviewed sample records provided by the seller and found incomplete entries, placeholder values like "None," and data fields that looked "more like a flat text collection than something pulled straight from a modern production database." The seller reportedly admitted to Hackread that they did not hack or breach OnlyFans at all, and instead built the database by aggregating old leaked credentials from previous third-party breaches with publicly available information scraped from OnlyFans profiles.

Cybernews independently confirmed the viral nature of the claims but echoed the assessment that the dataset appears to be a compilation rather than a direct breach. PiunikaWeb noted that no breach notification has been issued by OnlyFans, no security researcher has validated the dataset, and the timing — just two weeks after the $3.15 billion Architect Capital stake sale closed — suggests the claims may be an opportunistic attempt to capitalize on heightened public interest in the platform.

The episode arrives at a particularly sensitive moment for OnlyFans. The platform's 377 million registered fan accounts and 4 million creator accounts make it a high-value target, and the March 2026 Pornhub/Aylo breach (200 million premium user records via compromised analytics vendor Mixpanel) demonstrated that adult platform data breaches carry uniquely severe consequences — including sextortion, outing, and employment discrimination — that mainstream platform breaches do not.

Sources

Update — 2026-05-25

Initial entry — story first created.