A RaidForums user posted a link to a shared Google Drive folder containing private videos and images from hundreds of OnlyFans accounts. Following the leak, a researcher created a website for OnlyFans creators to check if their accounts had been compromised.
OnlyFans allows content creators to earn money for making videos, photos, and live streams with fans who have a paid subscription to their content.
OnlyFans is popular among celebrities and social influencers, but with creators of adult-themed content.
Researchers at cybersecurity firm BackChannel found a post on a hacking forum with a link to a shared Google Drive full of OnlyFans adult-themed content.
Forum post sharing OnlyFans folder (BeepingComputer)
BackChannel founder Aaron DeVera told BleepingComputer that the Google Drive folder originally contained content of 279 OnlyFans creators with most of the content uploaded in October 2020. One of the folders had over 10GB of adult content.
Judging by the number of creators in the folder, BackChannel thinks multiple people took part in compiling the collection.
“What makes this unique is that so many users were bundled in one folder. This implies that multiple contributors likely added to the cache, or that the uploader sourced the content from multiple leaks. We do not assess that the poster on RaidForums is the original uploader of the Google Drive content,” DeVera told.
Owners of the OnlyFans content will have now to report their files for copyright infringement in order to remove them from Google Drive. This may involve a lot of work for those with large numbers of files.
“Stolen sexually explicit imagery is explicitly called out in their terms of service as a breach, however the only way to report this content is to go to each individual file and report it,” DeVera explained.
What’s interesting, the folder appears to be shared from the City College of San Francisco account. Given this BackChannel has contacted the school with a request to remove the entire folder.
BackChannel has created an ‘OnlyFans Lookup Tool‘ web page that allows an OnlyFans creators to determine if their content has been leaked.
In case their content is found leaked, the site will recommend to use https://labac.dev/content, and submit a DMCA infringement notification report.