“Your privacy is a promise we don’t break”: Dating app Raw exposes sensitive user data
ID: 37e93414-9f0f-5f12-a1da-39c15922b93e
STIX ID: report--37e93414-9f0f-5f12-a1da-39c15922b93e
Feed Name: Malwarebytes Blog
Threat Score
Raw, a 2023 dating app, exposed user profile data via an unauthenticated API—TechCrunch demonstrated that anyone with an 11-digit user ID could retrieve profiles and mass-scrape sensitive information including names, birth dates, photos, geolocation, and IP addresses. The company says the issue was fixed and regulators notified, but the disclosure and the planned Raw Ring wearable (which would collect biometric and audio data) raise significant privacy and security concerns.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
