World Understood

Yesterday night (or early morning November 22nd depending on where you reside), it was unveiled an unknown Threat Actor(s) had compromised Andrew Tate's online university, dubbed "The Real World (Hustler's University)". Note(s): 1. The content was given to non-profit organization DDoSecrets (unable to tag on X due to their account being suspended) and is available for anyone to review 2. Upon compromise (and exfiltration of data, presumably), the individual(s) responsible for the compromise inserted pro-transgender emojis onto the site and uploaded AI photos of Andrew Tate with a transgender flag. The compromise of Andrew Tate's website appears to be ideologically motivated, not financially motivated 3. Upon review of the compromised data we spotted some inconsistencies with reporting from media outlets. Some media outlets have stated the stolen data contains over 325,000 user email addresses. However, upon review we do not see email addresses UNLESS the users actual username on the website was their email address. We only spotted a few thousand (see image 1) The file in the leaked, "users.json", contains the following: - Unique UserID - Username - External UserID - Score (reputation) - Coin balance (forum based currency) - Server (unsure) - "User" (unsure) - Join Date - Roles Other fields visible, which appear to be optional entries based on users interaction with the website: - Profile content - "Learnv2" - Avatar Also present in the compromise is chat logs from both public and private rooms. These rooms include: - AI Automation - Business Mastery - Content Creation & AI Campus - Copywriting - Crypto DeFi - Crypto Trading - Cryptocurrency Investing - ECommerce - Fitness - Hustler's Campus - Social Media & Client Acquisition - The Real World Each room described has a both public and private variant. We briefly skimmed the contents of these and can confirm they have unfathomable amounts of chat logs and conversations. In the spirit of full disclosure: we are not going to review and/or read these chat logs. They are massive. In summary: the dumped conversations are legit. As a disclaimer: it may be possible that email addresses and more sensitive information is in the chat logs. We have not reviewed this in totality to confirm that (we don't feel like it).