Hookers.nl Data Breach

Initial reporting described approximately 250,000 users, while a public breach source later reported 290,955 dataset records and the collection-level classes emails, IPs, usernames, and either bcrypt or salted MD5 password hashes. These represent different review stages and should not be equated with people, current members, or local rows.

October 10 is the public confirmation or reporting date, not the exact access start or end. The moderator and reporting linked the event to a vBulletin vulnerability, but no complete forensic chronology or CVE was reviewed. All four fields should not be assumed to co-occur in every row, and algorithms may vary by row or version. A historical IP is not proof of a home or work network or current location, and a username is not proof of real identity.

The local searchable subset contains 290,539 email documents; IPs, usernames, and password hashes were not imported. A result can establish only that an email occurs in this local subset. It cannot establish membership, a sex-worker, client, or commenter role, sexual conduct or preference, real identity, password ownership, or misuse. A negative result covers only the local subset, and the sensitive association must not be disclosed to an unverified requester.