Hacker leaks data of 2.28 million people registered on dating site

Details of more the 2.28 million users of dating site MeetMindful have been released online for free in the latest in a series of stolen data dumps.
The stolen data includes real names, email addresses, address information, body details, dating preferences, marital status, birth data, location data, IP addresses, Bcrypt-hashed passwords, Facebook user IDs and Facebook authentication tokens. The inclusion of Facebook authentication tokens is particularly notable because it could potentially give access to the Facebook accounts of MeetMindful members in the database.

MeetMindful has not publicly addressed either the theft of its user data or its publication online.

ZDNet first reported the news today, saying only that the data was released by a “well-known hacker” as “a free download on a publicly accessible hacking forum known for its trade in hacked databases.” SiliconANGLE can confirm the data in question was released by ShinyHunters Jan. 20 and the forum was Raid Forums, a popular internet forum used by hackers which is easily found via Google search.

ShinyHunters has been rather busy lately. It was reported last week that it had published 1.9 million stolen user records from the free online photo editing service Pixlr as part of a release of hacked data from various sites. Researchers at cybersecurity intelligence firm Kela Research and Strategy Ltd. also discovered stolen data released on Raid Forums from Wongnai Media Co. Ltd., Tuned Global Pty. Ltd., Buyucoin, Wappalyzer, Teespring Inc. and Bonobos.com.

It’s not known how the data was stolen from MeetMindful, but ShinyHunters is particularly fond of obtaining data from misconfigured Amazon Web Services Inc. databases and S3 buckets.

Shivam Sharma

I’m Shivam — a free-spirit with a passion for technology, blogging, and photography.

Previous Post Next Post