Bumble And Match Group Report Cybersecurity Incidents Linked To ShinyHunters

Recent cybersecurity incidents have affected dating platforms Bumble and Match Group, following claims by the ShinyHunters hacking group. Both companies have responded with statements on the scope and impact of the events.

The ShinyHunters group stated through media channels that it had breached both Bumble and Match Group, listing the companies on its data leak site. The group also claimed to have obtained more than 10 million records from Match Group services, including Hinge, Match, and OkCupid, as well as hundreds of internal documents.

Bumble confirmed a security event involving a contractor’s account, which was accessed through a phishing attack. The company stated that the unauthorized access was brief and limited to a small part of its network, and that user data such as member databases, profiles, messages, and the app itself were not accessed during the incident.

Match Group reported a cybersecurity incident on January 28, 2026, which affected a limited amount of user data. According to the company, there is no indication that user login credentials, financial information, or private communications were accessed during the breach.

What the numbers show

• ShinyHunters claimed to have stolen over 10 million records from Match Group services
• The Match Group incident was confirmed on January 28, 2026
• Bumble reported the contractor account compromise in February 2026

Following the incident, Match Group began notifying users whose data may have been affected. The company initiated a notification process to inform these users, as part of its response to the breach.

Match Group stated that there is no evidence that user logins, financial data, or private chats were stolen. However, the company noted that personally identifiable information and tracking data for some users may have been involved in the incident.

Bumble stated that the compromised contractor account did not provide access to user data. The company emphasized that member databases, profiles, messages, and the app itself remained secure during the event.

Both companies have continued to monitor their systems and have provided updates to users in accordance with their internal procedures. The incidents have prompted notification processes and public statements to address the claims made by ShinyHunters.

* This article is based on publicly available information at the time of writing.