VULNpocalypse
Breaches and incidentsBriefReported by a reputable outlet, citing the company

Match Group and Bumble: ShinyHunters claims after contractor phishing

Match Group confirmed an incident involving “a limited amount of user data” and is notifying affected users, with “no indication that login credentials...

Disclosed

What happened

  • Match Group confirmed an incident involving “a limited amount of user data” and is notifying affected users, with “no indication that login credentials, financial information or private communications were accessed.” Bumble said a contractor’s account was compromised by phishing, giving “brief unauthorized access to a small portion of its network”, and that its member database, messages and profiles were not affected. ShinyHunters claims 10 million Match records and leaked thousands of internal Bumble documents from Google Drive and Slack.
  • Root cause: Bumble: phishing of a contractor account. Match: not disclosed.
  • ShinyHunters claimed both.
  • Match is notifying users; a lawsuit has been filed against Bumble.

Sources

This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.