Hinge (Match Group)

In January 2026, the same ShinyHunters group that hit Panera, Amtrak, and dozens of others (documented throughout this tracker) breached Hinge, Match, and OkCupid via a third-party analytics vendor (AppsFlyer), allegedly exposing over 10 million records of dating-app USAGE DATA and personal information (the attribution and count are unverified claims). Malwarebytes specifically singled this out against the same-week Panera breach: 'when your activity on a dating app is compromised, the impact can be deeply personal' — unlike a stolen loyalty-rewards number, exposed dating-app activity can reveal who you were interested in, when, and how. Separately, Illinois attorneys are investigating whether Hinge's selfie-verification feature illegally collected users' FACIAL GEOMETRY without the consent the state's biometric law requires, and a 2024 lawsuit alleges Hinge is deliberately engineered to make users 'compulsively' keep swiping and paying, rather than actually help them find a relationship and leave.

• Severity
• Evidence tierUnassigned
• Claims confirmed
• Last verified2026-08-04

Case status. Private litigation; the legal tier of its sources has not been assigned yet.

Primary source. www.upguard.com/news/match-data-breach-2026-01-29 — Verified - primary source confirmed.

Arbitration

Same Match Group-wide mandatory arbitration + class action waiver noted in that row — a ban on one Match Group app can extend across ALL Match Group platforms (Hinge, Tinder, OkCupid) simultaneously.

Data sharing

See the Match Group row for the primary findings: $14M FTC settlement over fake 'love interest' ads (that settlement covered Match.com specifically, though Match Group's broader practices affect all its brands including Hinge); a 2024 lawsuit specifically names Tinder/Hinge together alleging both apps are designed to be addictive using dark-pattern techniques.

Contacts

Privacy contact. Not recorded.

Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; the Secretary of State business-entity search in the state of incorporation gives the registered agent, which must accept service. If private: the state registered agent is usually the only reliable route.

Mailing address. Not recorded.