Saturday, March 8, 2025
HomeComputer SecurityRussia Ordered Dating App Tinder to Share the Users Private Data Including...

Russia Ordered Dating App Tinder to Share the Users Private Data Including Chat, Audio, Video

Published on

SIEM as a Service

Follow Us on Google News

Famous dating service app Tinder is required to share the user data including messages to Russian Law enforcement and intelligence agencies, according to Russia’s Roskomsvoboda internet rights group.

Tinder is a leading dating app with more than 50 million active users that collects personal information provided by users that include (username, password), as well as additional information (character, lifestyle, interests, photos, videos); or credit card and other financial information.

The registry entry is initiated by the Federal Security Service of Russia and the Russian Communication Sensor Roskomsvoboda puts Tinder into the list which required to share the data to the federal authorities.

Roskomnadzor entered the company Match Group, LLC, owner of the Tinder mobile app, into the register of information dissemination organizers on Friday, May 31, 2019.

This action has been taken under the Russian laws 97-FZ and 374-FZ which requires to collect and provide, upon request, the power bodies of the Russian Federation not only all user data but also correspondence, audio, video, and other relevant materials, roskomsvoboda reported.

Russia last year issued an order to ban the Telegram app after it refused to provide the user data as required.

Roskomnadzor, Russia’s communications regulator, said it had added Tinder to its database of compliant escort website after it had “provided the needed information.”

According to Roskomnadzor “The register of organizers of information is compiled by Roskomnadzor together with the bodies carrying out operational investigative activities and state security authorities in accordance with Federal Law No. 149-ФЗ “On Information, Information Technologies and Protection of Information”. “

Tinder says in its policy “We can disclose your information, “if necessary, to a) execute court decisions, such as a court order, subpoena or search warrant, government/law enforcement investigation, or other legal requirements; b) assist in the prevention or detection of crime (in each case, according to the current legislation); or c) to protect the safety of the user.”

You can follow us on LinkedinTwitterFacebook for daily Cybersecurity updates also you can take the Best Cybersecurity courses online to keep yourself updated.

Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Latest articles

10 Best Penetration Testing Companies in 2025

Penetration testing companies play a vital role in strengthening the cybersecurity defenses of organizations...

Lumma Stealer Using Fake Google Meet & Windows Update Sites to Launch “Click Fix” Style Attack

Cybersecurity researchers continue to track sophisticated "Click Fix" style distribution campaigns that deliver the...

Fake BianLian Ransom Demands Sent via Physical Letters to U.S. Firms

In a novel and concerning development, multiple U.S. organizations have reported receiving suspicious physical...

Strela Stealer Malware Attack Microsoft Outlook Users for Credential Theft

The cybersecurity landscape has recently been impacted by the emergence of the Strela Stealer...

Supply Chain Attack Prevention

Free Webinar - Supply Chain Attack Prevention

Recent attacks like Polyfill[.]io show how compromised third-party components become backdoors for hackers. PCI DSS 4.0’s Requirement 6.4.3 mandates stricter browser script controls, while Requirement 12.8 focuses on securing third-party providers.

Join Vivekanand Gopalan (VP of Products – Indusface) and Phani Deepak Akella (VP of Marketing – Indusface) as they break down these compliance requirements and share strategies to protect your applications from supply chain attacks.

Discussion points

Meeting PCI DSS 4.0 mandates.
Blocking malicious components and unauthorized JavaScript execution.
PIdentifying attack surfaces from third-party dependencies.
Preventing man-in-the-browser attacks with proactive monitoring.

More like this

10 Best Penetration Testing Companies in 2025

Penetration testing companies play a vital role in strengthening the cybersecurity defenses of organizations...

Lumma Stealer Using Fake Google Meet & Windows Update Sites to Launch “Click Fix” Style Attack

Cybersecurity researchers continue to track sophisticated "Click Fix" style distribution campaigns that deliver the...

Fake BianLian Ransom Demands Sent via Physical Letters to U.S. Firms

In a novel and concerning development, multiple U.S. organizations have reported receiving suspicious physical...