Stickam Data Breach
The 2017 Stickam data breach occurred in December 2017 when the user credential database of Stickam (stickam.com), a pioneering live streaming video and interactive webcam chat community founded in 2006, was compromised and published on underground hacking platforms.
Exposed Data Types
3- Email addresses
- Usernames
- Passwords
About This Breach
What information was affected in the Stickam incident?
The leaked credential archive (Stickam.com.txt) contains registered account details for platform broadcasters and viewers. Compromised records for 530,620 unique user accounts expose:
- Account Identifiers: Member usernames.
- Contact Credentials: Canonical email addresses.
- Authentication Data: Passwords hashed using unsalted MD5.
How many accounts were affected?
Rigorous RFC canonical parsing and deduplication across 531,308 credential lines confirmed 530,620 unique valid email addresses.
Technical analysis and security risks
The exposure of legacy credentials hashed with unsalted MD5 enables rapid offline password cracking using rainbow tables and modern hashcat clusters. Threat actors frequently leverage legacy social network credentials for automated credential stuffing against contemporary online services.
Recommended actions for affected users
Users who registered with Stickam should:
- Immediately change passwords across current accounts where the same or similar passwords might still be in use.
- Implement multi-factor authentication (MFA) across all email and online financial services.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
