Grindr has agreed to pay £26 million ($35.1 million) to settle a U.K. lawsuit alleging the company shared users' personal information, including HIV status, with third parties for commercial purposes such as advertising. The lawsuit, filed in April 2024, accused Grindr of violating U.K. privacy laws. The settlement was announced in September 2026.

What should defenders do?

Organizations handling sensitive health data should review data sharing agreements and privacy policies to ensure compliance with applicable privacy laws such as the U.K. Data Protection Act and GDPR principles. Users should review app privacy settings and permissions. Legal and regulatory compliance teams should monitor enforcement actions for guidance on data handling practices.

highPrivacy

Grindr Agrees to £26 Million Settlement Over U.K. HIV Data Sharing Allegations

Dating app settles lawsuit alleging violation of privacy laws by sharing sensitive user health data with third parties

CyberIntel DeskPublished 22 days agoUpdated less than a minute ago1 min read

Grindr Agrees to £26 Million Settlement Over U.K. HIV Data Sharing Allegations

Key Takeaways

Grindr agreed to pay £26 million ($35.1 million) to settle a U.K. lawsuit.
The lawsuit alleged Grindr shared users' personal information, including HIV status, with third parties for commercial purposes.
The case was filed in April 2024 and the settlement was announced in September 2026.

Related Security News

highData Breaches

Times Car Confirms Data Breach Affecting 6.6 Million User Accounts

Times Car, a Japanese car-sharing service, has confirmed a data breach compromising approximately 6.6 million user accounts. The incident was disclosed late last week, with the exact attack vector and nature of exposed personal information yet to be fully specified. Authorities and the company are reportedly investigating the breach.

BleepingComputerabout 4 hours ago1 min read

highCyber Attacks

Bitget Reports $388M Loss Following Exploitation of Third-Party Security Product Flaw

Bitget disclosed that an attacker stole approximately $388 million by exploiting a vulnerability in a third-party security product integrated into the exchange's infrastructure. The threat actor used the flaw to obtain high-level internal credentials, which were subsequently used on September 24 to issue fraudulent withdrawal commands to Bitget's wallet system. The exchange confirmed that most user funds remain secure, though the full extent of exposure is under investigation.

The Hacker Newsabout 6 hours ago1 min read