After a shared Google Drive was posted online containing the private videos and images from hundreds of OnlyFans accounts, a researcher has created a tool allowing content creators to check if they are part of the leak.
It is common for people to share OnlyFans content they subscribe to but what stands out about this leak is the large amount of creators whose private content has been shared at once.
OnlyFans is a website that allows content creators to earn money by sharing images, videos, and live streams with fans who pay to subscribe to their content.
While OnlyFans is promoted as a way for celebrities and social influencers to share their content, it is also heavily used to share adult-themed content with fans who pay to access it.
OnlyFans content shared on Google Drive
Last month, researchers at cybersecurity firm BackChannel found a post on a hacking forum where a member shared a Google Drive full of OnlyFans adult-themed content with other members on the forum.
It is not possible to see how large the folder is without downloading it. However, BackChannel founder Aaron DeVera told BleepingComputer that Google Drive folder originally contained folders for 279 OnlyFans creators, with one of the folders having over 10GB of videos and photos.
From the file dates in the shared folder, most of the content appears to have been uploaded in October 2020.
Due to the sheer amount of creators leaked in this shared folder, BackChannel believes it has been compiled by multiple people.
“It is not uncommon for subscribers of OnlyFans creators to share files. OnlyFans has somewhat weak content controls around their content, and there are plenty of bots and scrapers a legitimate subscriber can use. What makes this unique is that
so many users were bundled in one folder.”
“This implies that multiple contributors likely added to the cache, or that the uploader sourced the content from multiple leaks. We do not assess that the poster on RaidForums is the original uploader of the Google Drive content,” DeVera told BleepingComputer.
Unfortunately, owners of the OnlyFans content need to report individual files for copyright infringement to remove them from Google Drive. For those with large amounts of files, this can become a tedious endeavor.
“Stolen sexually explicit imagery is explicitly called out in their terms of service as a breach, however the only way to report this content is to go to each individual file and report it,” DeVera explained.
As this folder appears to be shared from the City College of San Francisco account, BackChannel is attempting to contact them to remove the entire folder.
New tools checks if a creator is in the OnlyFans leak
To help OnlyFans content creators determine if their content is part of this leak, BackChannel has created an ‘OnlyFans Lookup Tool‘ web page. This tool allows an OnlyFans creator to input their member name and determine if their content has been shared without permission.
If a creator enters their member and their content is found in the leak, the site will recommend that users visit https://labac.dev/content, which contains a DMCA infringement notification template that can be used to take down the content.
While the tool is currently only indexing the creators on this shared drive, DeVera has told BleepingComputer that they plan on adding further OnlyFans leaks that they discover.
BleepingComputer has contacted Google about how OnlyFans creators who are listed in this leak can more easily remove their content but has not heard back at this time.