HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedPIIIDENTITY_BASICCREDENTIALSMediumActive

Zoosk, Inc.

bd_55917fefd56d6a2a · schema v1 · pii pii-v1

Zoosk, Inc. notified the Delaware Attorney General of a data breach affecting approximately 16,120 Delaware residents. An unauthorized third party accessed a third-party-hosted database on or around January 12, 2020. Affected data included names, email addresses, dates of birth, and potentially passwords. Zoosk discovered the compromise on May 11, 2020, engaged forensic specialists, and began notifying affected individuals on June 3, 2020. The investigation was ongoing at the time of filing.

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

bd_40aaf6755c696b58Washington State AGfiled 2020-06-10(7d gap)Candidate
bd_496bee33a76a0499Oregon State AGfiled 2020-06-11(8d gap)Verified
bd_a6b98a214f2ef77aCalifornia State AGfiled 2020-06-11(8d gap)Verified

Source provenance

Source URL: https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2020/06/Zoosk.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 3, 2020
Raw hash: 20e7d561ce797d5eec8d6b292285ab031fbc76800ef19bc18c7a785352d02973

Reporting entity

Name: Zoosk, Inc.
norm: zoosk

Victim entity

Name: Zoosk, Inc.
norm: zoosk

Incident

Discovered: May 11, 2020
Materiality determined: —
Notification sent: Jun 3, 2020
Affected individuals: 16,120
Data types: PIIIDENTITY_BASICCREDENTIALS
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: contacted law enforcement authorities
Initial access: valid_credentials

Compliance

Time to disclose: 23 days(23 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.