Kiwi Farms 2019 Data Breach

The verified external record uses September 10, 2019 and reports that the linked forum notice disclosed exposure of email and IP addresses, dates of birth, and content created by members. Avatars and website activity are structured classes in the external record. The fields should not be assumed to occur together for every email, to represent a complete activity history, or to prove that an email owner authored particular content.

The first-party notice link currently redirects to the forum's .st domain and presents JavaScript verification to automated requests, so the full notice text could not be reread directly in this review. The date, 4,606 unique emails, and five classes were confirmed through the verified external endpoint. A separate administrator-account and user-data event reported in 2022 was not used to expand this 2019 scope.

The completed production email-only job processed 4,605 valid lines and created 4,605 unique email associations in the live index. Its preparation record says conversation and free-text files and the contents of userips.csv were excluded. The local scope therefore contains no IP address, date of birth, avatar, or website-activity data. The external unique-email measure is one above the local association count. Source-version and normalization details have not been reconciled, so no cause is assigned to the difference.

kiwifarms.net currently redirects to the operational forum domain. A local email match does not prove account ownership, real identity, continued membership, or authorship of any content. Unexpected messages that refer to an email address or old forum activity should not be treated as trustworthy; account and recovery settings should be checked by independently opening the known domain rather than following the message's link.