Coffee Meets Bagel outage caused by cybercriminals deleting data and files
(2023/09/06)
- Reference: 1694016067
- News link: https://www.theregister.co.uk/2023/09/06/coffee_meets_bagel_outage_caused/
- Source link:
If you got snubbed by the object of your affections on dating app Coffee Meets Bagel (CMB) in late August, don't feel bad, the company says its systems were down due to cyber baddies.
The powers behind the app confirmed the cause of the seven-day outage yesterday, confirming anyone trying to open the app during the "week of August 27… had the frustrating experience of not being able to sign in or use the app."
"We determined that the outage was the result of an outside actor who maliciously deleted company data and files. We quickly re-established a secure environment for our technology team to restore our production services and notified law enforcement," it adds in a [1]FAQ document on its website.
[2]
Access to the service was finally restored on September 3 after the "team spent days working around the clock to rebuild our system from online backups so that daters could securely get back online."
[3]
[4]
Of course, there are plenty of alternative dating sites and this author – who is married – is reliably informed by other fellow Reg vultures that determined daters use more than one channel to find their perfect partner online.
We have asked the company about the point of entry for the criminals, if they demanded a ransom, if any data was exfiltrated and whether internal security was beefed up in the wake of the attack.
[5]
Further updates from CMB, which claims to have 10 million users worldwide, will be disclosed "as soon as we've pieced everything together."
"We launched a thorough investigation, which is still ongoing, to understand the full scope of the incident and are working to further enhance company cybersecurity," the FAQ says. "We're incredibly sorry for the disruption, and we hope to make it up to new and existing CMB Daters alike."
To try to make up for the security wobble, the company is offering a "welcome package" that includes all of their active chats being extended by seven days; subscription extended for 14 days free of charge; and 1,000 free beans (allowing the user to "like" or "pass" on profiles) were added to accounts.
[6]
All users were signed out as a "security precaution." And for those worried they missed out on potential matches? No, you didn't, is the word from CMB.
"During the outage, we stopped sending potential matches (also known as bagels) and likes. Now that we're back online, you should be receiving bagels and likes as normal."
[7]Romance scam targets security researcher, hilarity ensues
[8]LGBTQ+ folks warned of dating app extortion scams
[9]'Pig butchering' romance scam domains seized and slaughtered by the Feds
[10]Romance scammers' favorite lies cost victims $1.3B last year
[11]Bumble fumble: Dude divines definitive location of dating app users despite disguised distances
[12]Why Nobody Should Ever Search The Ashley Madison Data
Another FAQ answered is: "Will matches think I ghosted them?"
"Nope! No CMB Daters were able to access the site during the outage, so everyone is on the same page."
CMB says it does not store payment information or data such as driving licenses, "as they are processed through third-party vendors."
The company, started by three sisters to give women a different online dating app experience, has taken in $23 million in funding from five investment rounds. ®
Get our [13]Tech Resources
[1] https://coffeemeetsbagel.zendesk.com/hc/en-us/articles/20204630281491
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZPj2ha6409qwZ1iR@LUShgAAAYE&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZPj2ha6409qwZ1iR@LUShgAAAYE&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZPj2ha6409qwZ1iR@LUShgAAAYE&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZPj2ha6409qwZ1iR@LUShgAAAYE&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZPj2ha6409qwZ1iR@LUShgAAAYE&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[7] https://www.theregister.com/2023/02/14/romance_scam_sophos/
[8] https://www.theregister.com/2022/06/27/ftc-lgbtq-extortion/
[9] https://www.theregister.com/2022/11/23/pig_butchering_domains_seized/
[10] https://www.theregister.com/2023/02/10/romance_scammers_cost_victims_13b/
[11] https://www.theregister.com/2021/08/26/bumble_location_leak/
[12] https://www.theregister.com/2015/08/26/why_nobody_should_ever_search_the_ashley_madison_data/
[13] https://whitepapers.theregister.com/
The powers behind the app confirmed the cause of the seven-day outage yesterday, confirming anyone trying to open the app during the "week of August 27… had the frustrating experience of not being able to sign in or use the app."
"We determined that the outage was the result of an outside actor who maliciously deleted company data and files. We quickly re-established a secure environment for our technology team to restore our production services and notified law enforcement," it adds in a [1]FAQ document on its website.
[2]
Access to the service was finally restored on September 3 after the "team spent days working around the clock to rebuild our system from online backups so that daters could securely get back online."
[3]
[4]
Of course, there are plenty of alternative dating sites and this author – who is married – is reliably informed by other fellow Reg vultures that determined daters use more than one channel to find their perfect partner online.
We have asked the company about the point of entry for the criminals, if they demanded a ransom, if any data was exfiltrated and whether internal security was beefed up in the wake of the attack.
[5]
Further updates from CMB, which claims to have 10 million users worldwide, will be disclosed "as soon as we've pieced everything together."
"We launched a thorough investigation, which is still ongoing, to understand the full scope of the incident and are working to further enhance company cybersecurity," the FAQ says. "We're incredibly sorry for the disruption, and we hope to make it up to new and existing CMB Daters alike."
To try to make up for the security wobble, the company is offering a "welcome package" that includes all of their active chats being extended by seven days; subscription extended for 14 days free of charge; and 1,000 free beans (allowing the user to "like" or "pass" on profiles) were added to accounts.
[6]
All users were signed out as a "security precaution." And for those worried they missed out on potential matches? No, you didn't, is the word from CMB.
"During the outage, we stopped sending potential matches (also known as bagels) and likes. Now that we're back online, you should be receiving bagels and likes as normal."
[7]Romance scam targets security researcher, hilarity ensues
[8]LGBTQ+ folks warned of dating app extortion scams
[9]'Pig butchering' romance scam domains seized and slaughtered by the Feds
[10]Romance scammers' favorite lies cost victims $1.3B last year
[11]Bumble fumble: Dude divines definitive location of dating app users despite disguised distances
[12]Why Nobody Should Ever Search The Ashley Madison Data
Another FAQ answered is: "Will matches think I ghosted them?"
"Nope! No CMB Daters were able to access the site during the outage, so everyone is on the same page."
CMB says it does not store payment information or data such as driving licenses, "as they are processed through third-party vendors."
The company, started by three sisters to give women a different online dating app experience, has taken in $23 million in funding from five investment rounds. ®
Get our [13]Tech Resources
[1] https://coffeemeetsbagel.zendesk.com/hc/en-us/articles/20204630281491
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZPj2ha6409qwZ1iR@LUShgAAAYE&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZPj2ha6409qwZ1iR@LUShgAAAYE&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZPj2ha6409qwZ1iR@LUShgAAAYE&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZPj2ha6409qwZ1iR@LUShgAAAYE&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZPj2ha6409qwZ1iR@LUShgAAAYE&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[7] https://www.theregister.com/2023/02/14/romance_scam_sophos/
[8] https://www.theregister.com/2022/06/27/ftc-lgbtq-extortion/
[9] https://www.theregister.com/2022/11/23/pig_butchering_domains_seized/
[10] https://www.theregister.com/2023/02/10/romance_scammers_cost_victims_13b/
[11] https://www.theregister.com/2021/08/26/bumble_location_leak/
[12] https://www.theregister.com/2015/08/26/why_nobody_should_ever_search_the_ashley_madison_data/
[13] https://whitepapers.theregister.com/
oof, this is going to get worse isn't it.
Corporate Scum
All the careful weasel words. "an outside actor who maliciously deleted company data and files" "We quickly re-established a secure environment" "as soon as we've pieced everything together"...
Be honest, the company was owned. The attackers wiped their systems, which means they almost certainly had read access to the data they wiped. The only carve out was for financial data held by third parties. So by inference, the attackers probably had access to all customer data not held by third parties. They know it is worse, but they are waiting till the news cycle cools off before they dum the bad news, probably and 8pm on a Friday or under other bigger news.
It's not Ashley Madison, but this sounds like the start of another blackmail/extortion kick.
But don't worry, they are giving you a two week extension and 1000 magic beans, not redeemable for cash or other services. That's fair right?
Coffee Meets Bagel CIO wakes up, to smell the coffee