2026 OnlyFans — hackers claim 340M-record mega leak; company denies breach (May 25)

On May 25, 2026, Cybernews reported that threat actors listed on a criminal forum what they described as roughly 340–350 million OnlyFans user records—including usernames, emails, join dates, follower/like/media counts, and alleged payment-card and linked-profile fields—while explicitly denying a fresh intrusion into OnlyFans systems and claiming the corpus was compiled from prior leaks, public sources, and other breaches. Cybernews researchers reviewed a 10-record sample with registration timestamps around August 2025 and could not verify total volume; OnlyFans told the outlet on background that “these reports are false.” BreachHistory catalogs the event as an unverified criminal marketing / compilation claim with company denial—not a confirmed OnlyFans database compromise.