CityJerks Data Breach (2023)
If you are a customer of CityJerks, here’s what’s now in circulation.
In early 2023, the "mutual masturbation" website CityJerks suffered a data breach that exposed 177k unique email addresses. The breach also included data from the TruckerSucker "dating app for REAL TRUCKERS and REAL MEN" with the combined corpus of data also exposing usernames, IP addresses, dates of birth, sexual orientations, geo locations, private messages between members and passwords stored as salted MD5 hashes. The data was subsequently listed on a public hacking site.
CityJerks customer?
See what’s already exposed about you — free, 15sWe check your email against known public breach records and the sites that publish your address, then show you what to do about each one. We don’t hold this company’s data. No account, no card.
Here for work? Check a company domain’s exposure.
On February 27, 2023, CityJerks and its sister site TruckerSucker appeared in a public data breach listing after attackers published a corpus containing records for 178,000 unique email addresses. The adult-oriented platforms, which facilitate mutual masturbation chats and trucker-specific dating, had their user databases stolen in early 2023. The material later surfaced on a public hacking forum, exposing highly personal details that many users assumed would remain private.
Confirmed Breach Details
The primary disclosure on Have I Been Pwned states that the combined dataset includes bios, dates of birth, email addresses, geographic locations, IP addresses, passwords, private messages, profile photos, sexual orientations, and usernames. Passwords were stored as salted MD5 hashes, a format that offers limited protection against determined cracking. The listing does not specify the exact attack vector or whether the breach resulted from ransomware, but the presence of private messages and sexual orientation data confirms the attackers achieved deep access to user profiles. No ransom demand figure or internal company notification has been made public.
Advertisement
BATECH StudioWe build it.We run it.Web apps, AI pipelines and internal tools — under your brand, not ours.Tell us what you need →
BATECH Studio and GalaxyWarden share common ownership.
Why This Matters for You and Your Family
If you or anyone in your household used CityJerks or TruckerSucker, your real-world identity is now easier to connect to intimate online activity. Dates of birth, geographic locations, and IP addresses can be combined with the exposed emails and usernames to dox individuals who believed their participation was anonymous. Private messages may contain explicit content or personal disclosures that could be used for blackmail or reputational harm. Even if you no longer use the sites, the data remains circulating on underground forums where it can be retrieved years later. Children or teenagers who share devices or reuse credentials could also be exposed through household email addresses that appear in the dump.
Doxxing and Identity-Chain Risks
The combination of usernames, IP addresses, sexual orientations, and private messages creates a classic doxxing chain. An attacker can start with an exposed email, locate linked social-media or gaming accounts, then use the IP and location data to narrow down your physical address. Profile photos and bios accelerate reverse-image searches that tie anonymous handles to real names. Once the chain is built, further extortion or harassment becomes straightforward. Credential leaks of this type frequently cascade into account takeovers on other services where the same password or slight variations were reused. Gaming accounts belonging to you or your children are particularly vulnerable because they often share email addresses or recovery phone numbers listed in the breach.
What to Do
- Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup to remove what you can.
- Rotate the password used on CityJerks or TruckerSucker anywhere it is reused and enable 2FA through an authenticator app rather than SMS.
- Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your data is caught in hours, not months.
- Cover the household with DoxxScan family coverage that extends to dependents and children's gaming accounts that chain back to the same address or credentials.
- Let remediation specialists handle takedown requests for any resurfaced private messages or photos appearing on data-broker or revenge sites.
The incident underscores how quickly niche-site breaches can expose life-altering personal details that persist indefinitely online. A single leak like this can fuel identity theft, targeted scams, or long-term blackmail attempts. DoxxScan by GalaxyWarden provides continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, and hands-on remediation by specialists, with household coverage that explicitly includes children's gaming accounts vulnerable to credential-based takeovers.
What the free scan actually returns
Found on people-search siteswe remove these
These listings are live, public, and legal to remove — and removing them is what we do.
Found in breach recordsverifiedreported — unverified
Each record is labeled: confirmed breach data, or an attacker’s claim no one has verified.
Leaked data cannot be deleted from the internet — anyone claiming otherwise is lying. Broker listings can be removed. We do the second, and show you exactly what to fix from the first.
For security and vendor-risk teams: a staff address in a leak does not mean you were breached — it usually means a third party was. We monitor a domain against 13.1B+ leaked records and tell you when one of your people appears. See what we would check →
Report details & sourcing
Related breaches
Match Group (Tinder, Hinge, OkCupid) Data Breach — January 2026
ShinyHunters claimed responsibility for stealing over 10 million Match Group user records in early 2…
149 Million Credential Mega-Exposure — January 2026
Security researchers discovered a publicly exposed 96 GB database with 149 million unique logins cov…
Under Armour 72M Customer Email Dataset Resurfaces — January 2026
72 million user emails from a prior Under Armour breach were reposted publicly in January 2026, ampl…