Ladies.com data breach: 118K accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2024-12-09
In 2024, the lesbian dating website ladies.com suffered a data breach. Attributed to an exposed Firebase database, the breach included extensive personal information on 119k users of the service including email addresses, photos, sexual orientation, genders, dates of birth and precise latitude and longitude, among other personal attributes. The website was shut down in mid-2024 and the breach later acknowledged by the site operator in December, along with a breach of the "Senior Dating" website run by the same organisation. Exposed data: bios, dates of birth, drinking habits, education levels, email addresses, family structure, genders, geographic locations, latitude and longitude pairs, photos, profile photos, relationship statuses, sexual orientations, smoking habits, tattoo status, usernames. The breach dates from Jul 3, 2024; Have I Been Pwned loaded it on Dec 9, 2024.
What to do
- If you had a Ladies.com account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
Sources
All live incidents on Threat Watch