Naughty America, a major adult-entertainment subscription platform operated by La Touraine, Inc., suffered a data breach disclosed in spring 2016. A threat actor using the alias Peace advertised the stolen database for sale on the dark-web market The Real Deal at a price of approximately $300, an unusually low valuation for a multi-million-record dataset.\n\nThe threat actor claimed approximately 3.8 million user accounts were compromised across Naughty America and affiliated platforms including the gay-content site Suite703 and related community forums. Have I Been Pwned subsequently indexed approximately 1.4 million unique email addresses from the dataset. Exposed fields included usernames, email addresses, dates of birth, IP addresses, passwords stored largely as MD5 hashes, and website activity records covering subscription and content interaction. No financial-account data has been publicly tied to the leak.\n\nFor affected individuals, the practical risk extends well beyond standard credential exposure. The combination of email, date of birth, and account activity records creates a base for blackmail, extortion, and reputational harm tied to documented adult-platform participation. Anyone who used Naughty America or any of its affiliated sites should not respond to unsolicited extortion or blackmail attempts referencing the breach. Such messages are typically mass-targeted and rely on victims paying out of fear. Law enforcement and victim-support resources are the appropriate first point of contact rather than the sender of any such message. Customers should also rotate passwords on any service where the same credentials were reused.

Subscription adult-content platforms collect highly sensitive account data, emails, usernames, payment-adjacent records, and viewing or subscription activity tied to explicit-content access.

Naughty America has continued to operate as an adult-content publisher since the 2016 breach. The company has not been publicly tied to a further major data breach disclosure. The 2016 dataset has periodically resurfaced on dark-web markets and breach-tracking aggregators, with the public-facing record updated by HIBP and DataBreach.com in 2025 as part of broader indexing of legacy adult-platform leaks. The wider adult-platform sector has continued to draw attention from researchers as one of the most consistently targeted categories for credential theft and extortion-driven attacks.