BodySwap
ModerateReportedDigital services
On 14 October 2026, an internet user claimed on a forum to have released a database attributed to BodySwap, an AI service for generating and editing images and videos. According to an analysis relayed by FrenchBreaches, the export dates from 3 August 2026 and holds about 10,300 accounts created since September 2025. The data mentioned are usernames, email addresses, password hashes, connection IP addresses for a large share of accounts, and purchase histories. The organisation has not confirmed the incident so far; the account count does not necessarily equal the number of distinct individuals.
Linking an email address to an account on an adult-oriented service could let a third party target the person with blackmail or phishing.
- Disclosed on
- October 14, 2026
- Sector
- Digital services
- Country
- International or undetermined
- Cause
- Undisclosed
Exposed data
- Email address
- Customer ID
- Connection data (IP, logs)
- Password (hashed)
- Order history
You are only affected if you had an account or an order with this organisation.
What you can do
- Change that password — and everywhere you reused it. That is how a leak spreads to your other accounts.
- Turn on two-factor authentication on the affected accounts: a stolen password is then no longer enough.
- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact