Recently, personal details for 3,688,060 users of the dating app MobiFriends have been posted online, with many sites offering it for free. While the breach data is from January 2019, the data contains Personally Identifiable Information (PII) such as hashed passwords, email addresses, mobile numbers, dates of birth, gender information, usernames, and app/website activity. Passwords were stored as an MD5 hash, which is a weak hash that can be cracked with relative ease.
MobiFriends has remained completely silent on the issue and has not even warned its user base of the ongoing situation.
