Member details stolen in pornography website 'breach'

The group calls itself “The Consortium” and shares characteristics with LulzSec, the notorious hacking group whose alleged members were arrested last week after their leader turned FBI informant.

The Consortium said it had breached the security the Digital Playground website, which is run by a company called Manwin.

“This company has security, that if we didn't know it was a real business, we would have thought to be a joke - a joke that we found much more amusing than they will,” the group said in a message posted on the Digital Playground website and archived online.

“We did not set out to destroy them but they made it too enticing to resist. So now our humble crew leave lulz and mayhem in our path.”

The Consortium also posted samples of the data it said it had stolen, including unencrypted credit card data.

“We not only have the 72k users of this site but also over 40k plaintext credit cards including CCVs, names and expiry dates,” it said.

CCVs are the three digit numbers printed on the back of credit cards and are meant to reduce fraud when ordering over the phone or online. They are normally stored separately to the rest of the card data.

The Consortium also published what it said was a sample of internal emails and software licences to show it had gained complete access to Digital playground’s systems.

The Digital Playground website was put back online following the apparent hack, but it has been closed to new members.

In a statement provided to the pornography news website, Manwin said the breach may have occurred before it took over the running of the website on 1 March. It said it had contacted members about the breach.

The Consortium’s posting said it had had access to the Digital Playground systems for “a while now”.

The group used a similar jocular tone to LulzSec in its posting, and referenced Anonymous and the “Antisec” campaign, a series of cyber attacks on the websites of the CIA, SOCA and other authorities.

Last week five men were arrested in Britain, Ireland and the United States as part of the FBI’s investigation into LulzSec. Court papers revealed that Hector Xavier Monsegur, alias “Sabu”, the group’s leader, had been cooperating with investigators since last summer.

The Telegraph