CyberNew CyberNew
Threat Intelligence & APT The Record 1 month ago

Grindr settles privacy lawsuit tied to disclosure of users’ HIV statuses for $35 million

CN
CyberNew Threat Research Desk
• Original Reporting: The Record
CyberNew Threat Intel Assessment
Assessed Severity: INFORMATIONAL
Impacted Surface
Cloud & Distributed Infrastructure
Intelligence Sector
Threat Intelligence & APT

Analyst Takeaway

"Image: Alexander Sinn via Unsplash/Photomosh Grindr settles privacy lawsuit tied to disclosure of users’ HIV statuses for $35 million The LGBTQ+ dating app Grindr has agreed to pay £26 million ($35.2 million) to resolve a UK lawsuit alleging that it provided advertisers with sensitive user data, including individuals’ HIV status. The company will pay the fines in two lump sums, with one payment..."

Recommended Defense & Mitigation

  • Threat Monitoring: Ingest published IOCs into SIEM/EDR detection rules for continuous telemetry monitoring.
  • Security Awareness: Alert staff and maintain baseline endpoint hardening across endpoints.
Curated & Verified by CyberNew Threat Intelligence Desk Standard Defense Framework (NIST / MITRE ATT&CK)
love
Image: Alexander Sinn via Unsplash/Photomosh

Grindr settles privacy lawsuit tied to disclosure of users’ HIV statuses for $35 million

The LGBTQ+ dating app Grindr has agreed to pay £26 million ($35.2 million) to resolve a UK lawsuit alleging that it provided advertisers with sensitive user data, including individuals’ HIV status.

The company will pay the fines in two lump sums, with one payment due by the end of December and the other slated for the end of March, according to a regulatory filing with the Securities and Exchange Commission (SEC) signed on September 4.

The settlement concludes a legal fight that dates to April 2024, when UK users sued for the alleged violations of their country’s privacy laws.

The incidents occurred in a period before early 2020 when Grindr was owned and run by a Chinese company, Kuntun.

A spokesperson for Grindr declined to comment, pointing to the company’s statement in the regulatory filing, which says the settlement “includes no findings or admission of liability.” 

Source Verification & Original Intelligence

This threat report was reviewed by CyberNew analysts and cross-referenced with primary security disclosures from The Record.

Primary Advisory →