Zoosk, Inc.

Zoosk, Inc reported a data breach to the Oregon Attorney General. The breach was reported on 2020-06-11. The breach occurred during 1/12/2020. The breach was discovered on 5/11/2020. 24,200,000 individuals were affected. Notice was sent on 6/3/2020.

Zoosk, Inc. reported that an unauthorized third party gained access to a database hosted by a third-party provider on or around January 12, 2020. The company discovered the incident on May 11, 2020, after being alerted to a potential compromise. The breach affected approximately 560,138 California residents, exposing names, email addresses, dates of birth, demographic information, and potentially passwords. Financial data and government IDs were not involved. Zoosk engaged forensic specialists, notified law enforcement, and implemented remediation measures including MFA and password rotation.

Zoosk, Inc. notified the Washington AG of unauthorized access to a third-party hosted database on May 11, 2020. Access occurred around Jan 12, 2020. Data included names, emails, DOBs, and potentially passwords. 115,158 WA residents affected. Investigation ongoing.

Zoosk, Inc. notified the Delaware Attorney General of a data breach affecting approximately 16,120 Delaware residents. An unauthorized third party accessed a third-party-hosted database on or around January 12, 2020. Affected data included names, email addresses, dates of birth, and potentially passwords. Zoosk discovered the compromise on May 11, 2020, engaged forensic specialists, and began notifying affected individuals on June 3, 2020. The investigation was ongoing at the time of filing.

ZOOSK filed a data-breach notice with the Illinois Attorney General during 2020 (case 20-223). The register records the breach as discovered on May 11, 2020. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.