Ashley Madison Hack: What Do We Really Know?

CHICAGO (CBS) -- If actual user data from Ashley Madison mirrors the allegedly stolen data that was posted on the Internet this week, then many Chicagoans might have cause for concern.

A hacking group has reportedly released information about millions of users of the website Ashley Madison, which promotes and facilitates extramarital affairs.

A 2012 analysis of Ashley Madison user data showed that Chicago ranked among the top "cheating cities." That was based on the number of user accounts in specific cities. Washington D.C., was No. 1.

So does this mean that philandering men (and probably a few women, emphasis on few) in Chicago are at risk of being exposed?

That appears to be a bit murky. According to several reports, the hackers uploaded data from 32 million Ashley Madison users, including emails, addresses and possibly limited credit card information.

For its part, Ashley Madison did not confirm whether the data dump was actually legitimate.

"We are actively monitoring and investigating this situation to determine the validity of any information posted online and will continue to devote significant resources to this effort," it said in a statement.

"Furthermore, we will continue to put forth substantial efforts into removing any information unlawfully released to the public, as well as continuing to operate our business."

Several computer security bloggers who analyzed the leaked data said that at least some of it was real.

The information was posted on the so-called Dark Web, which requires special software and browsers to access the information.

However, several sites have started posting emails from a massive 10 gigabyte file.

At least two sites, like Have I Been Pwned and Trustify, can help determine if your email was part of the data breach and potentially exposed. The sites only tell you if your email is connected to the hack, not additional details. In fact, entering your email on Pwned can help determine if your email is connected to other data thefts.

Other online sites posted email addresses from government agencies and major corporations--even the Vatican. Other sites claimed to have birth dates and usernames and other personal information (height, weight, sexual preferences etc.).

That doesn't mean that those emails were either real or tied to an actual user's account, let alone whether those individuals actually used the service and had affairs.

With Ashley Madison, anybody can use any email address, without having to verify that it is actually theirs.

Last month, the hackers claimed that they had stolen the Ashley Madison accounts and demanded that Ashley Madison take down its website, along with other similar sites that it operates.

On Wednesday, the group appeared to make good on that threat.

"Avid Life Media [Ashley Madison's parent company] has failed to take done Ashley Madison and Established Men. We have explained the fraud, deceit and stupidity of ALM and their members. Now everyone gets to see their data."

One respected security expert Brian Krebs reported that he has spoken with three people who say their information is included in the leaked database.