Andrew Tate’s “Real World” Hacked: 325k Emails Exposed

Andrew Tate’s online course platform recently fell victim to a cyberattack, compromising the email addresses of approximately 325,000 users.

The online university, The Real World, offers paid courses on “advanced learning and mentorship” for $50 per month. Topics covered on the platform include health, fitness, investments, and the development of online businesses. According to its founders, the courses are designed to teach “money-making skills.”

The attack coincided with the live broadcast of Andrew Tate’s show, Emergency Meeting, on the Rumble platform. Hackers infiltrated the platform’s main chat, flooding it with emojis, including the transgender flag, a feminist symbol, and AI-generated images depicting Tate with a rainbow flag.

Journalists were informed that the breach exposed the names of around 794,000 users, including both current and former members of the platform, as well as the contents of 221 public and 395 private chats. A list containing 324,382 email addresses of users who were removed from the community for non-payment of subscriptions was also leaked.

The hackers responsible claimed they exploited a vulnerability that allowed them to upload emojis, delete attachments, temporarily disable users, and block access to the platform. A source familiar with the situation described the motivation behind the attack as “hacktivism” and criticized the platform’s security measures as “absurdly inadequate.”

According to The Real World, the platform currently boasts over 113,000 active users. If accurate, this figure translates to subscription revenues exceeding $5.6 million per month.

Andrew Tate, a prominent figure in the “manosphere”—a network of websites and forums promoting ideas of masculinity—has publicly referred to himself as a misogynist. He is currently awaiting trial in Romania on charges of human trafficking and is under investigation for five additional cases involving minors. Tate denies all allegations.

The leaked data, including email addresses and chat contents, has been shared with the Have I Been Pwned service and the collective DDoSecrets, which publishes leaks in the public interest.