The adult website xHamster has an estimated 1 billion monthly visitors with 12 million registered users. The breach exposed 380,000 login credentials, including 40 email addresses belonging to the U.S. Army and about 30 accounts related to various government bodies.
After the breach, those credentials were traded on dark internet forums.
The news came after an anonymous hacker found a vulnerability in xHamster earlier in 2016.
xHamster acknowledges that the credentials that include usernames, emails and passwords are being traded, and are indeed legit. But it said that there is no risk for its users because all passwords are encrypted. But LeakBase reports said that xHamster used a "trivial and easy to crack" MD5 encryption algorithm that can be broken in a few seconds.
"The fact they think the hashes are secure is a blatant example of the faulty security placed in companies even to this day."
xHamster breach marks the second time in 2016, popular porn websites have fallen victims to hackers. Previously, Brazzers was hacked exposing 800,000 user information.
