View All R&D Articles

The Ashley Madison Leak: What Information Was Released?

August 27, 2015

The Ashley Madison data leak is unquestionably the most high-profile IT security event of the last year, and members of the website face serious repercussions. Ashley Madison advertises as “the world’s leading married dating service for discreet encounters,” but that discretion was compromised as hackers released about 30 gigabytes of user data, including email addresses, names, and even GPS coordinates (likely collected from mobile users).

The leaked information came from a MySQL database, and many of the fields are fairly self-explanatory. “eye_color,” for instance, gives the user’s eye color (as input by the user when signing up for an Ashley Madison profile). For many accounts, some fields are left blank.

Credit card information is stored in a separate area, and most hackers will not be able to definitively link usernames with payment information. Furthermore, the leak did not contain complete credit card numbers, so payment information should be safe; even so, we would advise Ashley Madison users to contact their card providers and request a re-issued credit or debit card.

The Ashley Madison database contains the following fields—

Table: aminno_member_email

FieldDescription
pnumThe record’s primary key.
emailThe account email address.
isvalid
html
optinWhether or not the user opts in to the Ashley Madison newsletter.
notify_newmail
notify_newmember
notify_login
notify_offer

Table: member_details

pnumThe record’s primary key.
eye_colorUser’s eye color.
hair_colorUser’s hair color.
dobUser’s date of birth.
profile_captionUser-generated caption, visible on account profile.
profile_ethnicityUser’s self-identified ethnicity, expressed as a number.
profile_weightUser’s weight, visible on profile.
profile_heightUser’s height, visible on profile.
profile_bodytypeUser’s body type, expressed as a number.
profile_smokeWhether or not the user smokes. Visible on profile.
profile_drinkUser’s drinking status. Visible on profile.
profile_initially_seekingType of relationship user is initially seeking, visible on profile.

Table: member_login

pnumThe record’s primary key.
usernameUser’s username.
passwordUser’s password (these are encrypted).
loginkeyLogin keys are unique to each user, authenticating the user for logout.
notify

Table: am_am_member

idUser id number.
createdonDate and time the account was created.
createdbyUser who created the account.
updatedonDate and time (to second) the account was last updated.
updatedbyUser who updated the account.
adminWhether or not the user has administrative status in the system.
statusUser’s relationship status.
account_typeType of account.
membership_statusUser’s membership status.
ad_sourceTracks site advertising.
profile_numberUser’s profile number.
nicknameUser’s nickname.
first_nameUser’s first name
last_nameUser’s last name.
street1User’s street address.
street2Second line of user’s street address (if applicable).
cityCity listed in user’s address.
zipZipcode listed in user’s address.
stateState listed in user’s address.
latitudeUser’s location latitude.
longitudeLongitude of user’s location.
countryUser’s country of residence.
phoneUser’s primary phone number.
work_phoneUser’s work phone number .
mobile_phoneUser’s mobile phone number.
genderUser’s gender.
dobUser’s date of birth.
profile_captionUser-generated caption, visible on account profile.
profile_ethnicityUser’s self-identified ethnicity, expressed as a number.
profile_weightUser’s weight, visible on profile.
profile_heightUser’s height, visible on profile.
profile_bodytypeUser’s body type, expressed as a number.
profile_smokeWhether or not user reports smoking.
profile_drinkWhether or not user reports drinking.
profile_initially_seekingWhat the user is initially seeking, expressed as a number.
profile_relationshipUser’s relationship status, expressed as a number.
pref_opentoType of experience the user says he or she is willing to try (or “open to”), listed as numbers.
pref_opento_otherWhat the user hopes a match will be open to
pref_opento_abstractUser-written statement of what the user is willing to participate in.
pref_turnsmeonItems that the user says he or she is interested in. Expressed in numbers.
pref_turnsmeon_otherList of things that the user wants a match to be interested in. Expressed in numbers.
pref_turnsmeon_abstractWritten description of the user’s “turn-ons.”
pref_lookingforAttributes the user is looking for in a match/dating experience.
pref_lookingfor_otherList of attributes the user hopes a match is looking for.
pref_lookingfor_abstractUser’s description of a preferred match.
main_photoUser’s uploaded photo.
security_questionUser’s security question.
security_answerAnswer to user’s security question.

This is a complete list of all of the fields in the MySQL portion of the database. However, several of the fields use numerical codes to indicate a selection from the user. “profile_relationship” specifies the relationship status of the user as follows:

1: “Attached Female Seeking Male”
2: “Attached Male Seeking Female”
3: “Single Male Seeking Female”
4: “Single Female Seeking Male”
5: “Male Seeking Male”
6: “Female Seeking Female”

The “pref_opento” field contains a number that correlates to one of the following:

1: “Threesome”
3: “Being Dominant/Master”
4: “Being Submissive/Slave”
6: “Bondage”
7: “Conventional Sex”
11: “Fetishes”
14: “Nothing Kinky”
15: “One-Night Stands”
17: “Role Playing”
18: “Sex Talk”
19: “Spanking”
21: “Experimenting with Tantric Sex”
22: “Transvestitism”
23: “Experimenting with Sex Toys”
23: “Exploring with Sex Toys”
26: “Aggressiveness”
27: “Blindfolding”
28: “Bubble Bath for 2”
29: “Cuddling & Hugging”
30: “Curious – Domination”
31: “Curious – Submission”
32: “Dressing Up/Lingerie”
33: “Erotic Movies”
34: “Erotic Tickling”
36: “Extended Foreplay/Teasing”
37: “Gentleness”
38: “Good With Your Hands”
39: “Kissing”
40: “Light Kinky Fun”
41: “Likes to be Watched/Exhibitionism”
42: “Likes to Give Oral Sex”
43: “Likes to Receive Oral Sex”
44: “Likes to Go Slow”
45: “Lots of Stamina”
46: “Open to Experimentation”
48: “Sensual Massage”
49: “Sharing Fantasies”
50: “Someone I Can Teach”
51: “Someone Who Can Teach Me”
52: “You Like to Cross Dress”

The “looking for” section also contains a number that correlates to the following:

1: “A Don Juan”
4: “Sense of Humor”
6: “Aggressive/Take Charge Nature”
9: “Average Sex Drive”
10: “Confidence”
11: “Discretion/Secrecy”
12: “Dislikes Routine”
14: “Good Personal Hygiene”
16: “Has a Secret Love Nest”
17: “High Sex Drive”
18: “Imagination”
19: “Likes Routine”
30: “A Professional/Well Groomed”
31: “Stylish/Classy”
32: “Casual Jeans/T-shirt Type”
33: “Tattoos”
34: “Body Piercing”
35: “BBW”
36: “Full Size Body”
37: “Muscular/Fit Body”
38: “Petite Figure”
39: “Slim to Average Body”
40: “Tall Height”
41: “Short Height”
42: “Long Hair”
43: “Short Hair”
44: “Girl Next Door”
45: “Naughty Girl”
46: “Bad Boy”
47: “Boy Next Door”
48: “Creative and Adventurous”
49: “Relaxed and Easy Going”
50: “Hopeless Romantic”
51: “A Father Figure”
52: “Not Possessive”
53: “A Good Listener”
54: “Good Communicator”
55: “Disease Free”
56: “Drug Free”
57: “Casual/Social Drinker”
58: “Seeking a Sugar Baby”
59: “Seeking a Sugar Daddy”
60: “Natural Breasts”
61: “Facial Hair”
62: “Tall, Dark and Handsome”

Datarecovery.com offers computer forensics services, which can help to verify the presence (or non-presence) of an individual’s information in the Ashley Madison leak. Given the nature of this leak, we offer this service exclusively to victims — not to spouses or other individuals. For more information, speak with a computer forensics expert by calling 1-800-237-4200.

Summary
The Ashley Madison Leak: What Information Was Released?
Article Name
The Ashley Madison Leak: What Information Was Released?
Description
A list of the types of information accessible in the leaked Ashley Madison MySQL database.
Author