Cutout.Pro 2024 Data Breach
Platform · AI-powered visual design and image editing services · AI visual design platform · Global
Cutout.Pro AI Image Editing Platform Breach (2024): 40 Million User Accounts Including Passwords Exposed
AI-powered image editing platform.
Confirmed · ObscureIQ Intelligence
Breach Risk Index i
23/100
Lower riskHigher risk
Lower: limited current risk based on data value and recency.
Data Sensitivity i
StandardExposed data is largely lower-sensitivity. Standard identity-protection precautions are advised.
40.4MRecords
2024Year
The Breach Risk Index (BRI) is a proprietary 0–100 score rating how dangerous a breach is right now, based on how recently the data has been circulating on the dark web and how valuable it is to attackers.
Breach Summary
Cutout.Pro, an AI-powered image and video editing platform serving tens of millions of users globally, suffered a data breach in February 2024 after a misconfiguration exposed its internal database. A hacker obtained and leaked a 5.93 GB database directly on a public hacking forum and distributed it through Telegram channels. The exposed database contained over 41 million records tied to an estimated 20 million user accounts. The breach exposed names, email addresses, IP addresses, and hashed passwords. The passwords were protected with salted MD5 hashing, a relatively weak standard that determined attackers can crack with modern tools. For affected users, this combination of data creates real risk: exposed credentials can be tested against other accounts the person uses, and their email address and IP address can be used to craft convincing phishing attempts or identify their approximate location. Cutout.Pro did not make prominent public statements about the breach, and no formal notification to affected users has been widely documented. No regulatory action or class-action litigation specific to this incident has been reported. Users of the platform should treat their Cutout.Pro password as compromised, change it immediately, and update any other accounts where the same password was used. Because the platform handles personal photos and business design assets, affected users should also consider what images they may have uploaded and processed through the service.
Full threat analysis, exploitation vectors, and principal guidance below.
10 additional sections · verified field analysis · defensive doctrine
Querying breach corpus…
Cross-referencing exposed field types…
Resolving threat-actor attribution…
Compiling principal risk advisory…
40.4M records analyzed
About Cutout.Pro
Cutout.Pro is an AI-powered image and video editing platform offering background removal, photo enhancement, portrait retouching, and creative generation tools. The service operates on a credit-based freemium model and has attracted tens of millions of registered users globally, primarily serving content creators, designers, and small businesses who use the tools for social media and marketing assets.
Why They Hold Your Data
AI visual-design platforms collect user accounts, uploaded images, project metadata, billing records, and usage activity tied to editing and generative design workflows.
Recent Developments
Cutout.Pro continues to operate as an AI image processing platform. The market for AI-powered creative tools has become highly competitive. No major organizational changes have been prominently reported in public sources.
Data Points Exposed
4 verified field types
Email Address
Full Name
IP Address
Password High
Breach Impact
In February 2024 a hacker leaked a 5.93GB database from Cutout.Pro containing over 41 million records including names, email addresses, IP addresses, and hashed passwords. The data was published publicly. Cutout.Pro did not make prominent public statements about the breach at the time of exposure, and no formal notification to affected users has been widely documented. No class-action litigation or regulatory action specific to this incident has been prominently reported.
Exploitation & Downstream Threats
• Credential stuffing against reused passwords across other platforms | • Targeted phishing campaigns using exposed email addresses
Principal Risk Advisory
What this means for a principal
A consumer-service breach: contact and account data supports phishing, account takeover and profile enrichment. For a high-profile principal the main risk is credible impersonation and enrichment of existing exposure.
What You Should Do
- Reset any reused passwords and enable MFA on email first, then financial accounts.
- Do not use unofficial 'am I affected' lookups; several are themselves harvesting operations.
How ObscureIQ Can Help
- Corpus confirmation: determine whether and where the principal (plus household and staff) appear in this dataset and which specific fields are exposed for them.
- Exposure mapping: cross-reference the exposed identifiers against broker-available data to size and prioritize the principal's wider footprint.
- ThreatWatch tuned to this incident's identifiers and misuse pattern (impersonation and targeting patterns, not generic credential monitoring).
Protect Yourself
Check If You're Affected
Enter your email to check whether your data appears in this breach. We’ll send a 6-digit code to confirm it’s your address.
Get Free Breach Alerts
Be the first to know when new breaches are disclosed. Free forever — confirm your email with a 6-digit code.
High-Risk? Get an Exposure Audit
Executives, public figures, and high-visibility operators can receive tailored exposure intelligence and hardening guidance.
Request Consultation