Zoosk Data Breach

NOTICE: If you are a member of the Zoosk online dating site and have received a NOTICE OF DATA BREACH, contact the Arnold Law Firm at (916) 777-7777.

blue-hacked-white-lettersOn May 11, 2020, popular online dating site Zoosk learned that a malicious actor claimed to have accessed certain Zoosk member information. An investigation proved that the claim was authentic, and Zoosk notified its members of the data breach.

According to the notice, an unauthorized party breached Zoosk data stored in a database hosted by a third-party vendor on or around January 12, 2020.

On June 3, 2020 Zoosk began providing direct notice of this incident to affected individuals by email, including more than 560,000 California residents. The compromised database contained member online profile information, including:

  • Names
  • Email addresses
  • Dates of birth
  • Demographic information
  • Gender
  • Gender search preference
  • Passwords

Zoosk has reportedly implemented remediation efforts, such as changing passwords and enabling multifactor authentication. The company is advising its members to change their membership passwords and report any suspected incidents of fraud or identify theft to law enforcement.

This security incident appears to be part of a massive dark web inventory by a hacker group called “ShinyHunters”. Over the first two weeks of May 2020, the group listed nearly 200 million freshly stolen user records from 13 entities for sale:

  • Zoosk – online dating site (30 million)
  • Tokopedia – Indonesian e-commerce giant (91 million)
  • Minted – design-focused marketplace (5 million)
  • HomeChef – meal kit delivery service (8 million)
  • Bhinneka – Indonesian online store (1.2 million)
  • StyleShare – Korean fashion media platform (6 million)
  • Ggumim – Korean mobile magazine (2 million)
  • Mindful – health and wellness site (2 million)
  • Chatbooks – online printing and photo store (15 million)
  • Chronicle of Education – web publication (3 million)
  • Star Tribune – Minnesota newspaper (1 million)
  • Unacademy – Indian e-learning platform (11 million)
  • Chronicle.com – college-oriented news site

Created in 2007 in Fremont, California, Zoosk was acquired by Berlin-based Spark Networks in July 2019 for $258 million. Global dating company Spark Networks owns several other niche dating app brands and is the world’s second largest publicly listed dating company with over one million monthly paying subscribers.

If you are a member of the Zoosk online dating site and have received a NOTICE OF DATA BREACH, contact the Arnold Law Firm at (916) 777-7777 to discuss your situation and possible legal options.