Grindr users’ sensitive data shared through ad auctions without valid consent

2026-10-14T08:51:45Z•3f4c000c5c3c222d34ea7af34c4102c40ccadf4117add669ea8499730786531f
AI securityAndroid securityChrome securityTLS certificatesaccount takeovercredential stuffingcritical infrastructurecybercrimedata breachdomain hijackingphishingprivacyprompt injectionretailsocial engineeringweak passwords

What happened

Malwarebytes Labs’ October 5–13, 2026 reporting covers privacy violations, data breaches, phishing and credential theft, cyberattacks against retail infrastructure, domain hijacking, Android and Chrome security updates, AI-assisted phishing, and cybercrime investigations. The feed highlights risks including unauthorized sensitive-data sharing, weak-password exposure, supply-chain and account-compromise activity, prompt injection targeting AI assistants, and exploitation of unpatched software. No specific CVE identifiers are provided in the supplied records.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
malwarebytes_labs
Record identifier
3f4c000c5c3c222d34ea7af34c4102c40ccadf4117add669ea8499730786531f
Enrichment time
2026-10-14T08:51:45Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.