Fling, an adult-oriented hookup and casual dating platform, was breached by an unknown attacker in 2011, exposing over 40 million user accounts. The method of intrusion has not been publicly disclosed. The breach did not surface widely until years after the incident, following a pattern common among early-2010s credential databases that circulated privately before becoming broadly known. The exposed data is unusually sensitive. Records included email addresses, passwords stored in plain text, dates of birth, phone numbers, geographic locations, IP addresses, genders, usernames, website activity histories, sexual orientations, and sexual fetishes. The combination of explicit sexual profile data with a hookup platform context creates serious risk of extortion, outing, and targeted harassment. Affected individuals may never have expected this information to leave the platform, and many may not know it was exposed at all. No settlement or regulatory action specific to this breach has been publicly documented. Affected users face lasting exposure: plain-text passwords can enable account takeovers across other services if reused, and the sexual profile data can be used to coerce or embarrass individuals years after the breach occurred. Anyone who used Fling around or before 2011 should treat their credentials as compromised and consider the possibility that their sexual identity information is in circulation.

Adult-oriented dating platforms collect highly sensitive profile data, emails, messages, sexual-interest signals, photos, and account activity tied to casual or explicit relationship seeking.

Fling has maintained a low public profile with no major organizational changes or ownership announcements prominently documented in recent years. The platform continues to operate as a niche adult dating service.