TLDR InfoSec · ATTACKS & VULNERABILITIES

MATCH GROUP BREACH EXPOSES DATA FROM HINGE, TINDER, OKCUPID, AND MATCH

bleepingcomputer.com2 min read

Summary from the TLDR InfoSec newsletter

Match Group has confirmed that a “limited amount of user data” was stolen after ShinyHunters claimed a breach of 1.7GB of stolen files allegedly containing 10M records. The attackers stole data after compromising an Okta SSO account, which gave them access to the company's AppsFlyer marketing analytics platform and to Google Drive and Dropbox accounts. The hackers stated that while the data contains some PII, it's mostly tracking data.