BreachExchange mailing list archives

Porn Star HIV Test Database Leaked


From: security curmudgeon <jericho () attrition org>
Date: Wed, 30 Mar 2011 19:04:53 -0500 (CDT)


http://gawker.com/#!5787392

Porn Star HIV Test Database Leaked

Adrian Chen - Porn Star HIV Test Database LeakedThe patient database of 
the private health clinic that conducts STD tests for California's porn 
industry has been breached, exposing test results and personal details 
about thousands of current and former porn performers, some of which have 
been published on a Wikileaks-style website.

Earlier this year, a website called Porn Wikileaks posted a list of what 
it claimed were the real names of more than 15,000 current and former porn 
performers, alongside their stage names and date of birth. This 
essentially "outed" them to any passing Googler, which caused an uproar in 
the industry since many porn performers try to keep their real name 
secret, for obvious reasons. That 15,000 names were on the list was 
significant, especially considering only about 1,200-1,500 performers are 
currently working in California's Porn Valley.

It turns out that many of the names came from a database belonging to the 
Adult Industry Medical Healthcare Foundation (AIM), which conducts the 
majority of STD tests for the porn industry. (Working straight performers 
get tested at least once every 28 days.) The porn gossip blogger Mike 
South was the first to report the breach after he was contacted by a 
number of porn performers who said the information posted about them on 
Porn Wikileaks must have come from AIM's database. Their proof: They had 
only used the stage names that were posted on Porn Wikileaks once, when 
registering for testing at AIM.

[..]
_______________________________________________
Dataloss Mailing List (dataloss () datalossdb org)
Archived at http://seclists.org/dataloss/
Unsubscribe at http://datalossdb.org/mailing_list

Learn encryption strategies that manage risk and shore up compliance.
Download Article 1 of CREDANT Technologies' The Essentials Series:
Endpoint Data Encryption That Actually Works
http://credant.com/campaigns/realtime2/gap-LP1/


Current thread: