Skip to content
Back to Blog
medium severity February 27, 2023 · 3 min read

CityJerks Data Breach (2023)

If you are a customer of CityJerks, here’s what’s now in circulation.

In early 2023, the "mutual masturbation" website CityJerks suffered a data breach that exposed 177k unique email addresses. The breach also included data from the TruckerSucker "dating app for REAL TRUCKERS and REAL MEN" with the combined corpus of data also exposing usernames, IP addresses, dates of birth, sexual orientations, geo locations, private messages between members and passwords stored as salted MD5 hashes. The data was subsequently listed on a public hacking site.

CityJerks Data Breach (2023)

On February 27, 2023, CityJerks and its sister site TruckerSucker appeared in a public data breach listing after attackers published a corpus containing records for 178,000 unique email addresses. The adult-oriented platforms, which facilitate mutual masturbation chats and trucker-specific dating, had their user databases stolen in early 2023. The material later surfaced on a public hacking forum, exposing highly personal details that many users assumed would remain private.

Named in this incident?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 582 companies.
See what is exposed about you — free scan →
Not ready yet? Run a free breach check on this email
We’ll check it against 13.1B+ leaked records right now — no account needed. Continuous monitoring & alerts are part of Protection.

Confirmed Breach Details

The primary disclosure on Have I Been Pwned states that the combined dataset includes bios, dates of birth, email addresses, geographic locations, IP addresses, passwords, private messages, profile photos, sexual orientations, and usernames. Passwords were stored as salted MD5 hashes, a format that offers limited protection against determined cracking. The listing does not specify the exact attack vector or whether the breach resulted from ransomware, but the presence of private messages and sexual orientation data confirms the attackers achieved deep access to user profiles. No ransom demand figure or internal company notification has been made public.

Why This Matters for You and Your Family

If you or anyone in your household used CityJerks or TruckerSucker, your real-world identity is now easier to connect to intimate online activity. Dates of birth, geographic locations, and IP addresses can be combined with the exposed emails and usernames to dox individuals who believed their participation was anonymous. Private messages may contain explicit content or personal disclosures that could be used for blackmail or reputational harm. Even if you no longer use the sites, the data remains circulating on underground forums where it can be retrieved years later. Children or teenagers who share devices or reuse credentials could also be exposed through household email addresses that appear in the dump.

Doxxing and Identity-Chain Risks

The combination of usernames, IP addresses, sexual orientations, and private messages creates a classic doxxing chain. An attacker can start with an exposed email, locate linked social-media or gaming accounts, then use the IP and location data to narrow down your physical address. Profile photos and bios accelerate reverse-image searches that tie anonymous handles to real names. Once the chain is built, further extortion or harassment becomes straightforward. Credential leaks of this type frequently cascade into account takeovers on other services where the same password or slight variations were reused. Gaming accounts belonging to you or your children are particularly vulnerable because they often share email addresses or recovery phone numbers listed in the breach.

What to Do

  • Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup to remove what you can.
  • Rotate the password used on CityJerks or TruckerSucker anywhere it is reused and enable 2FA through an authenticator app rather than SMS.
  • Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your data is caught in hours, not months.
  • Cover the household with DoxxScan family coverage that extends to dependents and children's gaming accounts that chain back to the same address or credentials.
  • Let remediation specialists handle takedown requests for any resurfaced private messages or photos appearing on data-broker or revenge sites.

The incident underscores how quickly niche-site breaches can expose life-altering personal details that persist indefinitely online. A single leak like this can fuel identity theft, targeted scams, or long-term blackmail attempts. DoxxScan by GalaxyWarden provides continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, and hands-on remediation by specialists, with household coverage that explicitly includes children's gaming accounts vulnerable to credential-based takeovers.

What the free scan actually returns

Sample resultyou@email.comIllustrative — not a real person

Found on people-search siteswe remove these

These listings are live, public, and legal to remove — and removing them is what we do.

value redacted in this sampleage, relatives, address historySpokeo
value redacted in this samplephone, household, property recordsBeenVerified
value redacted in this sample582 companies checked

Found in breach recordsverifiedreported — unverified

Each record is labeled: confirmed breach data, or an attacker’s claim no one has verified.

verifiedvalue redacted in this samplepassword + phone · 2024telecom breach
unverifiedvalue redacted in this sampleclaimed in ransomware listing · 2026leak-site claim

Leaked data cannot be deleted from the internet — anyone claiming otherwise is lying. Broker listings can be removed. We do the second, and show you exactly what to fix from the first.

Were you a CityJerks customer?
CityJerks is one listing. Your email is probably in others.
178K accounts were exposed here. Check whether yours is one — and find every other leak tied to the same address, in about 15 seconds. No account, no card.

By running your scan you agree to the Terms and Conditions and the Privacy Policy, and to GalaxyWarden emailing you the results of this scan.

Report details & sourcing

Severity Medium contact details only, none of them permanent
Disclosed February 27, 2023
Last reviewed July 22, 2026
Affected 178K
Data exposed BiosDates of birthEmail addressesGeographic locationsIP addressesPasswordsPrivate messagesProfile photos +2 more
Editorial & sourcing policy
GalaxyWarden is a breach-monitoring service and news aggregator. We do not exfiltrate, host, purchase, or redistribute stolen data. Breach information is compiled from publicly accessible sources and threat-intelligence platforms, and is reported as claims attributed to their source. We promptly correct or remove material shown to be inaccurate — see our content & takedown policy or write to support@galaxywarden.com.
Share this Post on X Reddit Email