Ladies.com 2024 Data Breach
Platform · Online dating and matchmaking · General dating platform · Global
Ladies.com Lesbian Dating Platform Breach (2024): 119K User Profiles Including Sexual Orientation, Photos & Location Exposed via Firebase
Online dating platform focused on lesbian matchmaking and social connections.
Confirmed · ObscureIQ Intelligence
Breach Risk Index i
65/100
Lower riskHigher risk
High and current: recent, valuable data circulating on the dark web now.
Data Sensitivity i
RestrictedBeing associated with this breach can itself be harmful. Disclosure is limited and presence is not confirmed to unverified parties.
119KRecords
2024Year
The Breach Risk Index (BRI) is a proprietary 0–100 score rating how dangerous a breach is right now, based on how recently the data has been circulating on the dark web and how valuable it is to attackers.
Crucial data exposed
IntimateSexual Orientation
Breach Summary
Ladies.com, a niche lesbian dating platform, suffered a data breach due to an exposed Firebase database that had been left publicly accessible without proper authentication or access-control configuration since approximately February 2024 or earlier. The vulnerability was independently identified by security researcher 'BobDaHacker' who reported it to the platform operator beginning February 25, 2024, but the operator did not remediate the vulnerability for approximately nine and a half months despite the disclosure attempts. OSINT researcher Ryan Fae publicly disclosed the vulnerability on X on December 3, 2024 with details indicating the scope of the exposure across Ladies.com and the operator's sister platform Senior Dating, which prompted the operator to acknowledge the breach and shut down both platforms on approximately December 4, 2024. The breach was indexed by Have I Been Pwned on December 9, 2024. The breach affected approximately 118,800 users on Ladies.com based on records indexed by breach-tracking services, alongside approximately 765,517 users on Senior Dating for a combined disclosure of approximately 917,000 users across the operator's two platforms. Compromised fields included email addresses, full names, usernames, dates of birth, profile photographs and additional photographs, biographical information, geographic location data with precise latitude and longitude coordinates, sexual orientation, gender, education levels, family structure, relationship statuses, drinking and smoking habits, and tattoo status. The dataset did not include passwords because Firebase authentication is typically managed through linked authentication providers including Facebook rather than through stored credentials. The combination of profile photograph with precise geographic coordinates, sexual orientation, and demographic information creates an exceptionally severe identification and outing risk because affected users can be visually and contextually matched across multiple data points to specific addresses or neighborhoods, with sexual orientation as an explicitly disclosed field rather than an inferred attribute. For affected users, the practical risk profile is exceptionally severe given the LGBTQ+-specific sensitivity of the field set and the precision of the geographic data. The combination of profile photograph with precise GPS coordinates and explicit sexual orientation disclosure creates targeted outing, harassment, blackmail, and physical-safety risk that may be particularly severe for users in family, employment, or jurisdictional environments hostile to LGBTQ+ identity, including users in U.S. states or other jurisdictions with limited LGBTQ+ legal protections, users in religious or family communities where outing carries significant consequences, and users whose employment status could be affected by outing. Affected users who receive extortion or outing-threat attempts should not pay ransom demands because payment does not stop further extortion. Users should document any threatening communications, treat all unsolicited contact referencing Ladies.com or related platforms with extreme caution, and report extortion attempts to local law enforcement. LGBTQ+ users with personal-safety concerns may benefit from contacting LGBTQ+ advocacy organizations including the Trevor Project (1-866-488-7386) and GLAAD's safety resources for confidential support. Affected users in violent-relationship situations may also benefit from contacting the U.S. National Domestic Violence Hotline (1-800-799-7233).
Full threat analysis, exploitation vectors, and principal guidance below.
11 additional sections · verified field analysis · defensive doctrine
Querying breach corpus…
Cross-referencing exposed field types…
Resolving threat-actor attribution…
Compiling principal risk advisory…
119K records analyzed
About Ladies.com
Ladies.com was a niche dating platform focused on lesbian matchmaking and social connections, operated by an entity also responsible for Senior Dating (a 40+ general dating platform). As an account-based niche dating service for the lesbian community, Ladies.com maintained user account data including names, email addresses, usernames, dates of birth, profile photographs, biographical information, geographic location data with precise latitude and longitude coordinates, sexual orientation, gender, education levels, family structure, relationship statuses, drinking and smoking habits, tattoo status, and other lifestyle attributes used for matchmaking. The platform's user demographic concentrated in lesbian and queer women, a population for whom dating-platform identification carries materially different risk profiles than for general dating-platform users because of LGBTQ+-specific privacy, safety, and family considerations.
Why They Hold Your Data
Dating platforms collect highly sensitive profile data, photos, messages, subscription records, and relationship-intent information tied to matchmaking and social interaction.
Recent Developments
Ladies.com was shut down on approximately December 4, 2024 following the public disclosure of the Firebase database exposure, and the website is no longer operational. The shutdown also covered Senior Dating, the sister property operated by the same entity. Independent researcher 'BobDaHacker' attempted to disclose the Firebase vulnerability to the operator beginning February 25, 2024, approximately nine months before the public disclosure forced operator action. The case has been widely cited in LGBTQ+-platform cybersecurity coverage as illustrating the elevated risk profile of LGBTQ+ dating-platform exposure and the consequences of operator unresponsiveness to security disclosure. The breach was indexed by Have I Been Pwned on December 9, 2024.
Data Points Exposed
13 verified field types
Date of Birth High
Education Information
Email Address
Family Structure
Gender
Geographic location
Lifestyle Habits
Physical And Lifestyle Profile
Profile Bio
Profile Photo
Relationship Status
Sexual Orientation High
Username
Breach Impact
The institutional impact on Ladies.com and the broader operator was effectively terminal. Both Ladies.com and Senior Dating were shut down following the December 2024 disclosure, and the case has been widely cited in cybersecurity coverage as illustrating systemic data-protection failures at small dating-platform operators. The reputational impact concentrated within the LGBTQ+-platform and niche-dating sectors, where Ladies.com was one of several lesbian-focused dating platforms. The operator did not provide credit monitoring services or other remediation to affected users. The case has been particularly cited in LGBTQ+ advocacy commentary because the exposure of sexual orientation combined with precise geographic coordinates carries elevated personal-safety risk for users in jurisdictions or family environments hostile to LGBTQ+ identity.
Exploitation & Downstream Threats
• Targeted phishing campaigns using exposed email addresses | • Doxxing risk from physical address exposure
Principal Risk Advisory
What this means for a principal
An intimate-data breach: preferences, orientation or explicit content linked to an identity create acute coercion and blackmail exposure. For a high-profile principal this is targeting-grade, not merely identity-theft-grade: the combination lets an adversary locate, impersonate, or pressure the principal with little additional work.
What You Should Do
- Be alert to sextortion or blackmail attempts referencing this data and do not engage; preserve and report messages.
- Do not use unofficial 'am I affected' lookups; several are themselves harvesting operations.
How ObscureIQ Can Help
- Corpus confirmation: determine whether and where the principal (plus household and staff) appear in this dataset and which specific fields are exposed for them.
- Exposure mapping: cross-reference the exposed identifiers against broker-available data to size and prioritize the principal's wider footprint.
- ThreatWatch tuned to this incident's identifiers and misuse pattern (impersonation and targeting patterns, not generic credential monitoring).
RD
Threat Actor: Researcher disclosure
Attribution based on available breach intelligence.
Read the full threat-actor profile →Protect Yourself
Protect Yourself: Limited Disclosure
Check If You’re Affected: Verification Required
Because being associated with this breach can itself be harmful, we do not confirm whether anyone appears in it to unverified parties. Verify your identity to privately check whether your own data appears in this breach or related indexes.
We will only reveal whether a specific person appears in this breach to that person.
Get Free Breach Alerts
Be the first to know when new breaches are disclosed. Free forever — confirm your email with a 6-digit code.
High-Risk? Get an Exposure Audit
Executives, public figures, and high-visibility operators can receive tailored exposure intelligence and hardening guidance.
Request Consultation