How a data request turned into a data breach

guest · Sep 6, 2018

How a data request turned into a data breach
September 06, 2018
https://www.engadget.com/2018/09/06/coffee-meets-bagel-data-breach/

I emailed the dating app Coffee Meets Bagel to request personal data. Within 24 hours the company asked for a selfie of me holding an ID card and a piece of paper with the words "Coffee Meets Bagel" scrawled on it.

The response form clearly spelled out where it got my data and laid out my rights to correct or erase my personal information [...] seven attached spreadsheets [...]
The only problem: This was not my data.

Instead, it belonged to Jon, a man from one of New York's outer boroughs who declined to be identified by his full name. I inadvertently learned a lot about him.
In short, this was a lens into some of a stranger's most personal and identifiable information. It was a data breach, caused, ironically, by an attempt at data transparency.

Arum Kang, Coffee Meets Bagel's co-founder and CEO [...] said the company has since reviewed every subject access request it's received to ensure this hasn't happened in other instances.
Click to expand...

mirimir · Sep 6, 2018

That is funny. Just too damn funny for words. I mean, photo and ID card. But hey, human error, right? Probably farmed out the work via Amazon Mechanical Turk, and some stoned kid in Tulsa screwed up

Log in or Sign up

How a data request turned into a data breach

guest Guest

mirimir Registered Member

Log in or Sign up

How a data request turned into a data breach

guest Guest

mirimir Registered Member

Useful Searches