A South American security researcher who goes by the handle Ch Russo claims to have obtained sensitive user information from popular BitTorrent site The Pirate Bay. He says that he gained access to the site's administrative control panel and exploited a SQL injection vulnerability that enabled him to collect user account information, including IP addresses and records of which torrents individual users have downloaded.