Millions of Vinted, Spotify and Tinder users’ data could be compromised in global hack


Millions of users of popular apps such as Vinted, Spotify, Candy Crush and Tinder may have had their sensitive location data stolen by an unknown hacker who has posted details on a Russian-language site popular with cyber-criminals. In what is being treated as a major international data breach, it is being reported that hackers have targeted US company Gravy Analytics (GA) which brokers location data for thousands of popular apps.

It is estimated that some 20 million people in Britain would have used one of the apps affected although it is not known how many may have had their location data stolen. Experts fear this stolen data will also make it easier for criminals to scam individuals or potentially blackmail them.

Read more…
Source: MSN News


Sign up for our Newsletter


Related:

  • Log4Shell Vulnerability in VMware Leads to Data Exfiltration and Ransomware

    June 28, 2022

    Trend Micro Research recently analyzed several cases of a Log4Shell vulnerability being exploited in certain versions of the software VMware Horizon. After investigating the chain of events, they found that many of these attacks resulted in data being exfiltrated from the infected systems. However, the researchers also found that some of the victims were infected ...

  • AMD targeted by RansomHouse, cybercrims claim to have ‘450Gb’ in stolen data

    June 28, 2022

    If claims hold true, AMD has been targeted by the extortion group RansomHouse, which says it is sitting on a trove of data stolen from the processor designer following an alleged security breach earlier this year. RansomHouse says it obtained the files from an intrusion into AMD’s network on January 5, 2022, and that this isn’t ...

  • 1.5 million customers impacted by Flagstar Bank data breach

    June 21, 2022

    Flagstar Bank has disclosed a security incident that led to the exposure of personal data belonging to up to 1.5 million customers. As reported by Bleeping Computer, the data breach occurred between December 3 and December 4, 2021. The US financial organization is headquartered in Michigan and operates over 150 branches in areas including Indiana, California, Wisconsin, ...

  • There are 24.6 billion sets of credentials up for sale on the dark web

    June 20, 2022

    More than half of the 24.6 billion stolen credential pairs available for sale on the dark web were exposed in the past year, the Digital Shadows Research Team has found. Data recorded from last year reflected a 64 percent increase over 2020’s total (Digital Shadows publishes the data every two years), which is a significant slowdown ...

  • A hacker group said it has broken into the Israeli electricity network

    June 16, 2022

    A hacker group identifying itself as the “Moses Staff” said it has broken into the Israeli electricity network, vowing to plunge the regime into darkness. The group said on Wednesday it had targeted the Israel Electric Corporation, the largest supplier of electrical power in the occupied territories, as well as Dorad Energy Ltd., which serves customers ...

  • Data breach at health care organization may affect 2 million

    June 8, 2022

    A digital attack on a Massachusetts-based health care organization may have compromised the personal information of as many as 2 million people, officials said. Shields Health Care Group Inc., which provides imaging and ambulatory surgical services at dozens of locations, said in a notice on its website Tuesday that data including names, Social Security numbers, dates ...