TLDR InfoSec · ATTACKS & VULNERABILITIES
MATCH GROUP BREACH EXPOSES DATA FROM HINGE, TINDER, OKCUPID, AND MATCH
Summary from the TLDR InfoSec newsletter
Match Group has confirmed that a “limited amount of user data” was stolen after ShinyHunters claimed a breach of 1.7GB of stolen files allegedly containing 10M records. The attackers stole data after compromising an Okta SSO account, which gave them access to the company's AppsFlyer marketing analytics platform and to Google Drive and Dropbox accounts. The hackers stated that while the data contains some PII, it's mostly tracking data.