Grindr Investigates Alleged Data Breach After Hacker Claims to Sell 15M User Records A hacker operating under the alias nilojeda has claimed to breach Grindr’s entire customer database, offering over 15 million user records for sale on an underground forum. The alleged dataset includes sensitive information such as usernames, display names, full names, emails, password hashes, phone hashes, gender and sexual orientation details, and dates of birth. The hacker posted the offer on June 2, pricing the data at $400 in cryptocurrency and providing a sample for verification. Grindr, however, has denied any evidence of unauthorized access. A company spokesperson stated that their investigation found no credible proof of a breach, adding that the legitimacy of the claim remains unclear. The app, which serves nearly 15 million active users across 190 countries, is headquartered in West Hollywood, the Bay Area, Chicago, and New York. The threat actor, nilojeda, first appeared on the forum on May 29 and has also claimed breaches of Hinge’s database and a collection of Spanish contacts. Grindr, a widely used dating platform within the queer community, continues to assess the situation as security researchers monitor the claims.

Match Group Confirms Data Breach After ShinyHunters Leaks 10 Million User Records Match Group, the parent company behind popular dating platforms Tinder, Match.com, Meetic, OkCupid, and Hinge, has confirmed a cybersecurity incident involving the theft of user data. The breach was linked to the ShinyHunters threat group, which leaked 1.7 GB of compressed files containing approximately 10 million records from Hinge, Match, and OkCupid, along with internal documents. In a statement to BleepingComputer, a Match Group spokesperson acknowledged the incident, stating the company acted swiftly to terminate unauthorized access. While the investigation is ongoing with external experts, Match Group reported no evidence that login credentials, financial information, or private user communications were compromised. Affected individuals are being notified as appropriate. The attack stemmed from a social engineering campaign targeting single sign-on (SSO) accounts at Okta, Microsoft, and Google across over 100 organizations. In Match Group’s case, hackers gained access by compromising an Okta SSO account, which provided entry to AppsFlyer marketing analytics and cloud storage services like Google Drive and Dropbox. The phishing attempt used the domain matchinternal.com. ShinyHunters claimed the stolen data included personally identifiable information (PII), though much of it consisted of tracking data. Security experts, including Mandiant’s CTO Charles Carmakal and Okta Threat Intelligence researcher Moussa Diallo, emphasized the need for phishing-resistant multi-factor authentication (MFA), such as FIDO2 security keys or passkeys, to mitigate such attacks. Okta also recommended strict app authorization policies and monitoring for anomalous API activity. The incident highlights ongoing risks from social engineering, with some financial institutions testing live caller verification to combat fraudulent access attempts. Match Group, which serves over 80 million active users and generates $3.5 billion in annual revenue, remains a high-value target for cybercriminals.