Cutout.Pro records for about 20 million accounts leaked on hacking forum

In late February 2024 a user of the BreachForums hacking forum published what they said was a database taken from Cutout.Pro, an artificial intelligence image and video editing service. The poster, using the alias KryptonZambie, shared CSV files totaling about 5.93 GB.

Have I Been Pwned added the data set on February 28, 2024 and put the number of affected accounts at roughly 20 million, listing email addresses, IP addresses, names and salted MD5 password hashes among the exposed fields. Other reporting described a wider set of columns in the dump, including user IDs, profile picture links, API access keys, account creation dates, mobile phone numbers, account type and account status.

The person who posted the files claimed to still have access to the affected systems at the time of publication, which suggested the company had not detected the intrusion. The data was subsequently redistributed through Telegram channels.

Cutout.Pro did not publish a statement acknowledging the incident in the weeks after the files appeared, and outlets covering the leak noted the absence of any confirmation from the company. Researchers and reporters checked samples independently, in part by confirming that password reset requests for listed addresses were accepted, and advised affected users to change reused passwords.