U.S. News
Dating Apps Targeted by Hackers Raise Alarm
Clear Facts
- Bumble and Match dating apps were recently targeted in a cyberattack allegedly linked to the ShinyHunters hacking group.
- Bumble reported that a contractor account was compromised in a phishing attack, but claims no user data was accessed.
- Match confirmed a security breach on January 28, stating only a limited set of user data was affected and no passwords, financial data, or private messages were exposed.
Recent claims connect the ShinyHunters hacking group to breaches at two prominent dating apps, Bumble and Match. These incidents highlight ongoing security concerns in the online dating industry, emphasizing the exposure risk of personal data.
Bumble acknowledged that a contractor’s account was compromised through phishing, resulting in unwanted but limited access.
“One of our contractor’s accounts was recently compromised in a phishing incident,” a Bumble spokesperson said. “The account had limited access privileges and was used to make a brief unauthorized access to a small portion of our network. Our InfoSec team quickly detected and eliminated the access, and the incident is contained. We have engaged external cybersecurity experts to investigate and have notified law enforcement. Importantly, there was no access to our member database, member accounts, the Bumble application, or member direct messages or profiles.”
Bumble firmly maintains that no user messages, profiles, or databases were accessed.
Match reported a similar breach and notified impacted users, assuring the public that crucial data such as passwords and private communications stayed secure.
“We are aware of claims being made online related to a recently identified security incident,” a Match Group spokesperson said. “Match Group takes the safety and security of our users seriously and acted quickly to terminate the unauthorized access. We continue to investigate with the assistance of external cybersecurity experts. There is no indication that user log-in credentials, financial information, or private communications were accessed. We believe the incident affects a limited amount of user data, and we are already in the process of notifying individuals, as appropriate.”
The ShinyHunters group has developed a reputation for exploiting vulnerabilities through phishing and vishing, focusing on stealing sensitive data rather than traditional ransomware.
Such attacks show that just one compromised account can open the door to internal company information, which in the wrong hands may expose platform weaknesses.
While no user profiles or direct messages were disclosed in these latest incidents, the personal nature of data on dating platforms underlines the ongoing risks of online privacy.
Security experts recommend using strong, unique passwords and enabling two-factor authentication for better protection.
Let us know what you think, please share your thoughts in the comments below.
