WhereIsAtlas · Technology

Ashley Madison

The adultery website whose 2015 hack exposed 36 million users — and whose owner then paid $1.66 million for faking profiles and selling a "Full Delete" that did not always delete

Active — Ashley Madison is a dating website marketed to people seeking extramarital affairs. In July 2015 it was hacked by a group calling itself the Impact Team, and profile information belonging to 36 million users was exposed. Its parent company settled with the US Federal Trade Commission, 13 states and the District of Columbia in December 2016 for $1,657,000 — a figure that could rise to $17.5 million — over allegations that it created thousands of fake profiles and sold a "Full Delete" service it did not always carry out. The site still operates and announced on 24 February 2026 that it was dropping the "affair" label in favour of "discreet dating".

Ashley Madison launched in 2001 as a dating website built explicitly around extramarital affairs, marketed with the tagline "Life is short. Have an affair." Its parent company was Avid Life Media, later renamed Ruby Corp, and by the mid-2010s the site claimed tens of millions of members worldwide.

In July 2015 a group calling itself the Impact Team breached the company and threatened to publish what it had taken unless the site was shut down. When it was not, the group released a sample of 2,500 users' details, and in August 2015 published a further 60 gigabytes of data — including records of users who had paid the site to remove their information after the first leak. The FTC later put the number of users whose profile information was exposed at 36 million. Chief executive Noel Biderman stepped down at the end of August 2015.

The breach was covered as a cybersecurity and privacy catastrophe rather than a sex story, and it became one: the leaked data included email addresses later checked against government and corporate systems, and the human damage — marriages, jobs, and in some cases lives — was widely reported.

What turned the episode from a hack into a regulatory case was the company's own conduct. In December 2016 the District of Columbia, 13 states and the FTC announced a consumer-protection settlement with ruby Corp., ruby Life, Inc. and ADL Media, Inc. The regulators alleged that Ashley Madison had failed to take reasonable steps to secure users' personal information, had created thousands of fake user profiles, had misrepresented the strength of its security, and had sold a "Full Delete" option that it did not carry out in all instances.

The settlement imposed a penalty of $1,657,000, which could rise to as much as $17.5 million pending a review of the company's financial records. The company also agreed to stop the deceptive practices, to refrain from creating fake profiles, and to implement a stronger data security program. Alongside the District of Columbia, the states in the action were Alaska, Arkansas, Hawaii, Louisiana, Maryland, Mississippi, North Dakota, Nebraska, New York, Oregon, Rhode Island, Tennessee and Vermont.

The site did not close. It continued operating under the same ownership line, and on 24 February 2026 it announced a rebrand, moving away from the affair framing toward what it called "discreet dating," with a new tagline, "Where Desire Meets Discretion." The company said its internal signup data showed that 57 per cent of new members in 2025 identified as single. Paul Keable, its chief strategy officer, described the pitch in a statement as offering "ethical discretion" to members who are "single, separated, divorced or non-monogamous."

The rebrand is best understood as the company's second attempt at the same problem. The first was selling secrecy — the "Full Delete" that the regulators said did not always work. The second is selling discretion as a product, in a company whose entire history is a case study in how badly the first attempt went.

Timeline

2001 — The site launches: Ashley Madison opens as a dating website built around extramarital affairs. (Canada)
Jul 2015 — The Impact Team breaches the site: A group calling itself the Impact Team takes user data and threatens to publish it unless the site is shut down.
Aug 2015 — The full dump: After the site refuses to close, the group publishes 60 gigabytes of data, including records of users who had paid to have their information removed.
28 Aug 2015 — The CEO resigns: Noel Biderman steps down as chief executive of the parent company, Avid Life Media. (Toronto)
2016 — The parent is renamed: Avid Life Media becomes Ruby Corp; the site keeps operating. (Toronto)
15 Dec 2016 — The regulators settle: The FTC, the District of Columbia and 13 states announce a consumer-protection settlement with ruby Corp., ruby Life, Inc. and ADL Media, Inc. (Washington, D.C.)
15 Dec 2016 — The penalty: The settlement imposes $1,657,000, with a possible rise to $17.5 million pending a review of the company's financial records.
15 Dec 2016 — The findings: Regulators allege thousands of fake profiles, misrepresented security, and a "Full Delete" that was not always carried out; the company agrees to stop.
Sep 2017 — The investigation wins an award: The FTC receives an international award for its Ashley Madison data breach investigation.
24 Feb 2026 — The rebrand: The company drops the affair framing for "discreet dating" and the tagline "Where Desire Meets Discretion," saying 57% of 2025 signups identified as single.

Quick facts

Launched: 2001
Original pitch: a dating site for extramarital affairs
Tagline (to 2026): "Life is short. Have an affair."
Breach: July 2015, by a group calling itself the Impact Team
Data exposed: 36 million users' profile information, per the FTC
Second release: 60 gigabytes published in August 2015
CEO: Noel Biderman stepped down at the end of August 2015
Parent: Avid Life Media, later Ruby Corp
Settlement: $1,657,000, announced 15 December 2016
Parties: the FTC, the District of Columbia and 13 states
Ceiling: the penalty could rise to $17.5 million on review of the company's finances
Allegations: thousands of fake profiles, misrepresented security, a "Full Delete" not always carried out
Rebrand: 24 February 2026, from "affairs" to "discreet dating"
New tagline: "Where Desire Meets Discretion"
Current status: still operating

Lineage — where the name went

A company, the breach that defined it, and the regulator that priced its conduct: from an affairs website to a settlement in two jurisdictions and a 2026 rebrand.

Avid Life Media acquired Ashley Madison (the parent company that owned the site)
2016 — Avid Life Media rebranded as Ruby Corp (the parent was renamed Ruby Corp)
Noel Biderman served under Avid Life Media (chief executive until August 2015)
2015 — The Impact Team breach defeated Ashley Madison (the breach that exposed 36 million users)
2016 — The FTC and multistate settlement defeated Ruby Corp ($1,657,000, with a possible rise to $17.5 million)
2017 — The FTC investigation award was succeeded by The FTC and multistate settlement (the FTC's investigation was recognised the following year)
2026 — The 2026 rebrand was succeeded by The FTC and multistate settlement (the company's answer was to sell discretion instead of affairs)
Paul Keable served under Ashley Madison (announced the 2026 rebrand)

Entities in this tree: Ashley Madison (company, 2001); Avid Life Media (company); Ruby Corp (company); Noel Biderman (person); Paul Keable (person); The Impact Team breach (event, 2015); The FTC and multistate settlement (event, 2016); The FTC investigation award (event, 2017); The 2026 rebrand (event, 2026)

Sources

Owners of Ashley Madison Enter Into Settlement with District, Other States, and FTC Concerning Data Breach — Office of the Attorney General for the District of Columbia (2026-09-19)
Operators of AshleyMadison.com Settle FTC, State Charges Resulting From 2015 Data Breach that Exposed 36 Million Users' Profile Information — Federal Trade Commission (2026-09-19)
FTC Earns Prestigious International Award for AshleyMadison.com Data Breach Investigation — Federal Trade Commission (2026-09-19)
Ashley Madison is rebranding from 'affairs' to 'discreet dating' — USA TODAY (2026-09-19)
Ashley Madison boss steps down after data breach — ABC News (Australia) (2026-09-19)
Ashley Madison CEO steps down following hacking — RTÉ (2026-09-19)
Ashley Madison agrees to $1.7 million settlement — CNN Business (2026-09-19)
Ashley Madison — Wikipedia (2026-09-19)