HTH Studios Data Breach

A public breach source says the collection later posted on a forum contained 411,755 unique email addresses and the collection-level classes names, usernames, dates of birth, phones, physical and IP addresses, browser user-agent details, purchases, and salted SHA-1 or MD5 password hashes. August 24 is a catalogue date, not a confirmed exact access, discovery, or publication day.

The operator referred to an October 2018 security overhaul and its own assessment that financial data was not affected. That statement does not establish the time or location of initial access, and a purchase class does not mean payment data appeared in every record. Fields varied by person. An email does not establish that an address, phone, date of birth, IP, device, purchase, or password hash co-occurred. Hashes are not plaintext and should not be assumed cracked or current.

The local searchable subset contains 320,503 email documents; other fields were not imported into local search. A result can establish only that an email occurs in this local subset attributed to HTH Studios; it cannot establish membership, adult or furry-content interests, a purchase, identity, password ownership, or misuse. A negative result covers only the local subset. The association is sensitive and person-level results must not be publicly labelled.