Portraitbox Hack Exposes Children’s Photos and Family Data
Summary
A cyberattack on Portraitbox reportedly stole children’s photos and families’ email addresses, delivery addresses, and passwords. Authorities say attackers are threatening to publish the photos; none had appeared in the Darknet at the time of reporting.
Key points
- The photo service Portraitbox, used by photographers for school and kindergarten photos, was hacked.
- Reportedly stolen data includes children’s photos, email addresses, delivery addresses, and passwords.
- The state data protection authority had received more than 50 reports from photographers.
- Authorities say attackers are trying to extort Portraitbox by threatening to publish the children’s photos in the Darknet.
- No children’s photos had appeared in the Darknet at the time of reporting.
- Affected families should change passwords and avoid links in suspicious emails; photographers must inform their customers.
Article Details
- Victim Organization
- Portraitbox
- Victim Domain
- Unknown
- Incident Type
- Cyberattack and data theft involving a photo-service platform
- Disclosure Date
- 2026-05-22
- Data Types Exposed
- Children's photos
- Email addresses
- Delivery addresses
- Passwords
- Affected Records
- Not disclosed
- Affected Data Size
- Not disclosed
- Operational Impact
- Data belonging to families was stolen. More than 50 reports from photographers had been received by the state data protection authority. Photographers were required to inform their customers.
- Ransom Or Extortion
- According to the state data protection authority, the attackers were trying to extort Portraitbox by threatening to publish the children's photos on the Darknet. The article reported that none of the photos had appeared there at that time.
- Claim Status
- confirmed