Coffee Meets Bagel, Inc.

On August 27, 2023, Coffee Meets Bagel, Inc. experienced a data breach reported by the Washington State Office of the Attorney General on October 3, 2023. The incident involved unauthorized access to the company’s systems, resulting in the compromise of personal information belonging to 7,455 individuals. The exposed data included sensitive details such as names, email addresses, phone numbers, and dates of birth. The breach highlights vulnerabilities in the company’s data protection measures, raising concerns over potential misuse of the leaked information, including identity theft, phishing attacks, or targeted scams. While the breach did not involve financial data or highly sensitive records like Social Security numbers, the exposure of personal identifiers poses risks to affected users, particularly in terms of privacy violations and reputational harm to the company. The incident underscores the importance of robust cybersecurity protocols to prevent unauthorized access and safeguard customer data in an era where digital threats are increasingly sophisticated.

Source: https://www.atg.wa.gov/data-breach-notifications | https://data.wa.gov/resource/sb4j-ca4h.json?id=15746

TPRM report: https://www.rankiteo.com/company/coffee-meets-bagel

"id": "cof037091825",
"linkid": "coffee-meets-bagel",
"type": "Breach",
"date": "8/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 7455,
                        'industry': 'Online Dating',
                        'name': 'Coffee Meets Bagel, Inc.',
                        'type': 'Private Company'}],
 'data_breach': {'data_exfiltration': 'Yes',
                 'number_of_records_exposed': 7455,
                 'personally_identifiable_information': ['names',
                                                         'email addresses',
                                                         'phone numbers',
                                                         'dates of birth'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['PII (Personally Identifiable '
                                              'Information)']},
 'date_detected': '2023-08-27',
 'date_publicly_disclosed': '2023-10-03',
 'description': 'The Washington State Office of the Attorney General reported '
                'a data breach affecting Coffee Meets Bagel, Inc. on October '
                '3, 2023. The breach occurred on August 27, 2023, and involved '
                'unauthorized access that compromised the personal information '
                'of 7,455 individuals, including names, email addresses, phone '
                'numbers, and dates of birth.',
 'impact': {'data_compromised': ['names',
                                 'email addresses',
                                 'phone numbers',
                                 'dates of birth'],
            'identity_theft_risk': 'High (PII exposed)'},
 'references': [{'date_accessed': '2023-10-03',
                 'source': 'Washington State Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Washington State '
                                                        'Office of the '
                                                        'Attorney General']},
 'title': 'Coffee Meets Bagel, Inc. Data Breach (2023)',
 'type': 'Data Breach'}