TheFappening

thefappening.so

179,117
Exposed Records
Dec 2015
Breach Date
10 years ago
Hard to Crack
Password Risk
Entertainment industry
Entertainment
Industry
Added to XposedOrNot on November 8, 2023 · #622 of 763 breaches by records exposed

About This Breach

"The ""Fappening"" refers to a data breach that occurred in 2014, in which private, nude photos of several high-profile celebrities were leaked online. The hack was accomplished by exploiting a security vulnerability in Apple's iCloud service, and resulted in the release of personal photographs of many popular female celebrities, including Jennifer Lawrence, Kate Upton, and others. The number of total records exposed was around 180,000, but it is widely reported that private images and videos of many female celebrities were leaked."

Data Exposed

Email addresses
Passwords
Usernames

Breach Details

Breach Type Data Breach
Searchable No
Verified Yes
Sensitive Data Yes Sensitive
Reference https://www.bleepingcomputer.com/news/security/fourth-fappening-hacker-caught-by-the-fbi/ (opens in new tab)

Frequently Asked Questions

When did the TheFappening data breach happen?

TheFappening was breached in Dec 2015. The breach was added to the XposedOrNot index on November 8, 2023.

How many records were exposed in the TheFappening breach?

179,117 records were exposed, making it the #622 largest of the 763 breaches in our index.

What data was exposed in the TheFappening breach?

The exposed data includes: Email addresses, Passwords, Usernames.

What should I do if I was affected by the TheFappening breach?

Change your password on the affected service (and anywhere you reused it), turn on two-factor authentication, and set up free breach alerts on XposedOrNot so you know the moment your email appears in a new breach.

What Should You Do?

Urgent

Change Your Passwords

Update your password immediately, using 12+ characters with numbers and symbols.

High Priority

Enable Two-Factor Authentication

Add 2FA on all supported accounts using an authenticator app like Google Authenticator or Authy.

Recommended

Monitor Your Accounts

Set up login alerts and review account activity regularly for suspicious access.

Best Practice

Use a Password Manager

Never reuse passwords: use a password manager to generate unique ones for each account.

This breach is marked sensitive, so it is excluded from public email search results. To find out if you were affected, sign up for free breach alerts and verify your email.