Grindr Users' Data Allegedly Leaked on Cybercrime Forum
A cybercrime forum listing claims to offer a small set of Grindr user records including full names, dates of birth, usernames, bcrypt password hashes, hashed phone numbers, profile details, geolocation data, and device information. Researchers reviewed 18 sample records; the dataset is offered for around $400, suggesting it may stem from compromised accounts rather than a full database breach. Users face risks of credential stuffing and phishing due to crackable hashes and potential password reuse.
- names
- dates-of-birth
- usernames
- password-hashes
- phone-numbers
- geolocation
- profile-data
A cybercrime forum has listed what appears to be a collection of Grindr user records containing full names, dates of birth, usernames, bcrypt password hashes, hashed phone numbers, profile details, geolocation data, and device information. The dataset, offered for roughly $400, was sampled by researchers who examined 18 records and determined it likely originated from individually compromised accounts rather than a direct breach of Grindr’s central database. Affected individuals face immediate risks of credential stuffing, phishing, and targeted harassment.
Public reporting from Cybernews indicates the listing surfaced on June 2, 2026. The sample records reviewed showed a mix of personal identifiers that could be used to link online personas to real-world identities. Because the passwords were stored as bcrypt hashes, determined attackers may attempt to crack them, particularly if users chose weak or reused credentials. The presence of geolocation and device data further increases the potential for physical-world targeting or account takeover attempts on linked services.
Want the rest of this breakdown?
Sign up free to keep reading. Members get extended access, the weekly breach digest, and a complimentary Warden™ to see if their identity is exposed in the breaches we cover.
A breach leaks your credentials. Then hackers chain those credentials to your address, family, phone, and employer using public broker sites. We’re the only tool built around that chain.
⚠ Were you in this breach?
Free email scanner. We check your address against 15.4B+ leaked records in 15 seconds — then show you the $19 cleanup that removes you from the broker sites aggregating leaked data.
Check my email — free →