Consumer Apps · Dating · Private litigation + Data breach
Bumble
Headline
Bumble's own 'women message first' feature — the entire premise of the app — was itself the SUBJECT OF A LAWSUIT alleging it discriminated against male users because only women can send the first message…
Not independently verified. Verification status: Unverified - heuristic first draft. Publish state: draft unverified.
Bumble's own 'women message first' feature — the entire premise of the app — was itself the SUBJECT OF A LAWSUIT alleging it discriminated against male users because only women can send the first message; Bumble settled the case (Mansour v. Bumble Trading Inc., Riverside County Superior Court) for $3 million in 2021, offering eligible users about $30 plus 20 free SuperSwipes. This is on top of the Jan 2026 corporate breach documented elsewhere in this tracker, in which ShinyHunters claimed to have taken files from Bumble's Slack and Google Drive after a contractor account was phished — meaning the app built around putting women in control of the first move has had to defend that exact design choice in court.
- Severity
- Evidence tierUnassigned
- Claims confirmed
- Last verified2026-08-04
Case status. Private litigation; no sources are on file yet, so no legal tier is assigned.
Primary source. None recorded — Unverified - heuristic first draft.
Terms
Arbitration
Not independently confirmed this pass — standard binding arbitration + class action waiver expected.
Data sharing
ONE JANUARY 2026 INCIDENT, TWO TRACKS: (1) A January 2026 breach (disclosed by hacking group ShinyHunters) followed a phishing compromise of a contractor account that Bumble says gave brief access to 'a small portion of our network'; ShinyHunters claims to have taken ~30GB of compressed files from Bumble's Google Drive and Slack (the group's claim, not confirmed by Bumble); Bumble states member profiles/messages were NOT exposed in this specific incident, though the scale of internal document theft raises questions about what sensitive business/employee data was included. (2) A class action filed in Texas in Feb 2026 (Omirin v. Bumble) over the same ShinyHunters incident alleges a 'massive and preventable' cyberattack exposed actual USER data — names, dates of birth, addresses, phone numbers, SOCIAL SECURITY NUMBERS, account numbers, AND highly sensitive context-rich dating data (chat history, dating history) — alleging Bumble failed to encrypt data adequately and failed to follow required security protocols. The combination of financial identifiers (SSNs) with intimate dating-app content is a particularly high-risk data combination for identity theft AND personal/reputational harm.
Fees and billing
Not itemized this pass.
Contacts
Privacy contact. Not recorded.
Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; the Secretary of State business-entity search in the state of incorporation gives the registered agent, which must accept service. If private: the state registered agent is usually the only reliable route.
Mailing address. Not recorded.
Evidence
No claims have been itemized for this row yet.
No sources are on file for this row yet.
Source vault
Link status: Candidate - not yet fetched
| Document | Last fetch | |
|---|---|---|
| Privacy policy bumble.com/en/privacy-policy | Not fetched yet | NO (HTML only) |
| Terms of service bumble.com/en/terms | Not fetched yet | NO (HTML only) |
| Website No URL recorded | Not fetched yet | — |
| Primary source No URL recorded Verification: Unverified - heuristic first draft | Not fetched yet | — |
Enforcement
No enforcement actions are linked to this row.
State statute
No HQ state on file, so no state statute applies by headquarters.