So, do tell. Did you log in today? Don't worry, we won't tell you boyfriend. Or your husband. If you did log in to Grindr (or its premium sister-app Grindr Xtra) did you see any notice letting you know that over 100,000 user accounts had been hacked? If your answer was no, then that would be an experience shared with all of Grindr's other users.
Last week Grindr was hacked in Australia. Not just hacked, but comprehensively hacked:
The attackers evidently listed users’ Grindr users’ information on another site that displayed their screen names pseudonyms, passwords and bookmarked friends. The website set up by the hackers allowed Grindr users to be impersonated, pictures to be changed as well as messages to be sent and received from their accounts without the Grindr users from even knowing.
The hacking was limited to Australian users and compromised only the data stored on Grindr, not personal billing information like credit card numbers or addresses or phone numbers. You would think the site would get the word out to all their members, like when they send a message for a paid ad about a party in Philadelphia. They did
n't take that route though. Instead they wrote a blog post.
Now they could have sent a notification that would link you to said blog post if you wanted to know more about it. You could opt to read about it or not and go about your way. To their credit, they did post it to their Facebook page. Unfortunately that only reaches a little over 20,000 users. As Grindr now boasts over one million users now, that means they've only reached out to about two per cent of their users.
That two per cent reacted angrily too. Here are some of the Facebook comments posted to their wall:
- I guess adding more ads, and arbitrary TOS deletions are more fundamental to Grindr than security. #justsaying
- Seriously, Grindr seems like its #1 priority is profitability, not user experience. After users *resoundingly* complained about your horrible pop-up/full screen ads a few months ago, they're back again and more horrible than ever. So ready to just delete the app entirely.
- I've been a paid member of Xtra for quite some time and this is VERY disappointing. On top of that, what seem to be ridiculous and oversensitive moderation rules btw can you point me in the direction of your list of prohibited words aside from the obvious. I'm befuddled to see a screen of guys are A.OK half nekkid with a bunch of sexual solications, but rugby shorts and tongue-in-cheek flirations are too risque? Other things: new o/s = Grindr has issues, can't get all messages - trouble logging on etc. This all screams cash cow and lack of proper R&D. To balance negative with positive: the app is easy to use, the extra features of Xtra are nifty. It's a shame the end user experience is so hit and miss. Now with this MAJOR security breach, I may need some convincing as to why I (and my degrees of friends) shouldn't abandon the app. -I've deleted Grindr and advised all my friends to do the same. A company that can't be bothered to implement the most rudimentary security for its users doesn't deserve anyone's business. -Muito legal
- Delete, delete, delete! Besides, I'm sure it used to work better when we all had to be in the same place and actually talk to each other (I realise I'm being an old cart here).
While they're now focussing on a security upgrade they need to also focus on their growing public relations issue as well. The solution often is to "admit you have a problem". Be open and honest with your clients and let them know that resolving the issue is first priority.
Grindr, we want you to succeed. Pull it together.
