110M Bumble Profiles for $300? Hackers’ Breach Claim Analyzed

Hackers Claim 110M Bumble Profiles for Sale for $300: What We Know

1. 110 Million Bumble Profiles for $300? Why Experts Are Skeptical of the Massive Leak Claim
2. Dark Web Forum Claims 110M Bumble Users Exposed—Here Is What the Data Samples Show
3. Is Your Dating Profile Safe? Hackers Claim Massive 110 Million Bumble Record Sale
4. $300 for 110M Records: Why the Latest Bumble Data Breach Claim Raises Major Red Flags
5. Fresh Data Leak Claims Hit Bumble as 110 Million User Profiles Surface Online

A threat actor on an underground cybercrime forum claims to be selling a database containing sensitive personal information from 110 million Bumble users for just $300.

The announcement has raised concerns across the cybersecurity community. However, researchers analyzing the listing point out major discrepancies in the claimed dataset size, pricing, and user volume, raising questions about whether the offer is a massive breach, web scraping, or an exaggerated scam.

Key Highlights

• Claimed Dataset: 110 million user records allegedly containing emails, phone numbers, location details, demographic info, and dating profile bios.
• Suspicious Pricing: Offered for just $300 on an underground forum—a price point cybersecurity experts consider suspiciously low for a breach of this magnitude.
• Volume Discrepancy: Bumble reports around 40 million active users, meaning a true 110M record database would exceed the platform’s active user base (potentially including deleted, duplicate, or historical accounts).
• Sample Authenticity: Cybernews researchers verified 36 sample records containing recent August 2026 timestamps and legitimate profile data.
• Link to Prior Leaks: A similar post in June 2026 claimed to sell 32 million Bumble records. While database field names match, the new listing lacks password hashes and contains newer timestamps.

Technical & Fraud Analysis: Breach or Data Scraping?

Cybersecurity researchers examining the 36 shared sample records confirmed that the exposed details appear authentic. However, several operational “red flags” suggest the listing may not represent an active internal systems breach.

                  [ Threat Actor Forum Posting ]
                                 │
                 ┌───────────────┴───────────────┐
                 ▼                               ▼
       [ Claimed Features ]            [ Security Red Flags ]
       • 110 Million Profiles          • Price ($300) is drastically low
       • Emails, Phones, Bios          • Exceeds active user base (~40M)
       • Aug 2026 Timestamps           • Lacks password hashes/auth tokens
                 │                               │
                 └───────────────┬───────────────┘
                                 │
                                 ▼
         ┌───────────────────────────────────────────────┐
         │ Likely Source: Automated API Scraping or      │
         │ Re-packaged / Aggregated Public Data Sets     │
         └───────────────────────────────────────────────┘

1. The Red Flags

• Extremely Low Valuation: A legitimate 110-million-record database containing contact information and user bios would command thousands of dollars on dark web marketplaces. Selling it for $300 suggests either non-exclusive mass scraping or low seller credibility.
• User Count Mismatch: Bumble‘s active monthly user base hovers around 40 million. While historical inactive accounts could account for the larger figure, threat actors frequently exaggerate dataset counts to boost forum reputation.

2. Compare & Contrast: June vs. September Listings

Feature	June 2026 Listing	September 2026 Listing
Claimed Records	32 Million	110 Million
Sample Size	27 Records	36 Records
Password Hashes	Included	Not Included
Timestamps	Older historical data	Up to August 2026
Field Structure	Standard Bumble API fields	Identical matching field names

Security Risks for Bumble Users

If personal dating profile details are exposed alongside contact information, cybercriminals can leverage the data for highly targeted exploitation:

1. Spear-Phishing & “Pig Butchering” Scams: Detailed profile descriptions allow scammers to build customized trust scenarios, targeting individuals based on listed interests, relationship goals, and demographics.
2. Cross-Platform Impersonation: Complete profile copy, bios, and personal attributes allow malicious actors to recreate fake identities across competing dating platforms.
3. Doxing and Harassment: Publicly linking sensitive personal preferences or relationship status with personal phone numbers and emails creates severe privacy risks, particularly for vulnerable groups or LGBTQ+ individuals in restrictive jurisdictions.

Frequently Asked Questions (FAQ)

Was Bumble actually breached?

There is no confirmed evidence of an internal Bumble system breach. Security researchers suspect the dataset was compiled via automated web scraping of public profiles or aggregated from secondary sources, rather than a direct database intrusion.

Why is the $300 price tag suspicious?

High-value databases containing verified emails, phone numbers, and private data usually sell for thousands of dollars. Selling 110 million records for $300 strongly indicates the data may be public, incomplete, or inflated.

How can users protect their information?

• Avoid sharing personally identifiable details (full names, specific workplaces, exact locations) in public dating bios.
• Watch for suspicious texts, emails, or WhatsApp messages from unknown contacts referencing details from your dating profile.
• Use dedicated secondary email addresses for online dating apps.