---
title: "Data breach at BodySwap"
description: "On 14 October 2026, an internet user claimed on a forum to have released a database attributed to BodySwap, an AI service for generating and editing images and videos. According to an analysis relayed by FrenchBreaches, the export dates from 3 August 2026 and holds about 10,300 accounts created sinc"
canonical: https://inyourgeek.com/en/fuites-de-donnees/2026-10-14-bodyswap
type: fuite-de-donnees
author: "Sébastien Soulier"
publisher: "InYourGeek"
language: en
datePublished: 2026-10-14
dateModified: 2026-10-14
---
# BodySwap

Data breach — Moderate

On 14 October 2026, an internet user claimed on a forum to have released a database attributed to BodySwap, an AI service for generating and editing images and videos. According to an analysis relayed by FrenchBreaches, the export dates from 3 August 2026 and holds about 10,300 accounts created since September 2025. The data mentioned are usernames, email addresses, password hashes, connection IP addresses for a large share of accounts, and purchase histories. The organisation has not confirmed the incident so far; the account count does not necessarily equal the number of distinct individuals.

Linking an email address to an account on an adult-oriented service could let a third party target the person with blackmail or phishing.

| Fact | Value |
| --- | --- |
| Disclosed on | October 14, 2026 |
| Sector | Digital services |
| Country | International or undetermined |
| Cause | Undisclosed |
| Severity | Moderate |
| Status | Reported |

## Exposed data

- Email address
- Customer ID
- Connection data (IP, logs)
- Password (hashed)
- Order history

## What you can do

- Change that password — and everywhere you reused it. That is how a leak spreads to your other accounts.
- Turn on two-factor authentication on the affected accounts: a stolen password is then no longer enough.
- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

## Sources

- [BodySwap](https://frenchbreaches.com/alertes/bodyswap-mv8n254b9jvyg9eol5) — FrenchBreaches

_Entry built from the cited sources after a corroboration check, then reviewed before publication._

---

Equivalent HTML page : https://inyourgeek.com/en/fuites-de-donnees/2026-10-14-bodyswap
Published by InYourGeek — https://inyourgeek.com/en/a-propos
Method and safeguards : https://inyourgeek.com/en/methode
Full register : https://inyourgeek.com/en/fuites-de-donnees