A security incident involving Match Group, which operates popular dating platforms like Tinder and Hinge, has led to claims of user data exposure by a group named Scattered LAPSUS$ Hunters. Reports from 404 Media indicate that this group obtained a large amount of internal documents, including unique advertising IDs and corporate receipts.
In response, a spokesperson for Match stated that they are aware of the situation and have acted swiftly to terminate unauthorized access. They emphasized that there is no evidence of compromised user log-in credentials or financial details, asserting that the impact on user data is limited. Notifications are being sent to affected individuals.
According to the hackers, access was gained using a social engineering method known as vishing, which involves impersonating trusted entities over the phone. This incident raises concerns about the security of Okta, the company behind Match's single-sign-on service, although Okta has confirmed that its platform remains secure.
Additionally, AppsFlyer has denied any connection to the breach, stating that its systems were not compromised and that the incident did not originate from their infrastructure.