Ladies.com 2024 Data Breach
ObscureIQ Breach Intelligence
High SeverityWebsite / service breach
Ladies.com Lesbian Dating Platform Breach (2024): 119K User Profiles Including Sexual Orientation, Photos & Location Exposed via Firebase
Online dating platform focused on lesbian matchmaking and social connections.
Verified by ObscureIQ Intelligence
72/100Breach Risk Index
40Data Value
25Market Recency
504dSince Breach
Breach Intelligence Summary
Entity: Ladies.com · Actor: n/a (Firebase misconfiguration; same researchers as Senior Dating) · Sources: 2 references
Attack: Misconfiguration
Profile: Platform · Online dating and matchmaking · General dating platform · Global
Timeline: Breach (2024-07-03) · Indexed (Dec 09, 2024) · Year (2024)
Exposure: 119K records · 13 fields: Date of Birth, Education Information, Email Address, Family Structure, Gender, Geographic Location, Lifestyle Habits, Physical & Lifestyle Profile, Profile Bio, Profile Photo, Relationship Status, Sexual Orientation, Username
Status: Confirmed
Executive Summary
Ladies.com, a niche lesbian dating platform, suffered a data breach due to an exposed Firebase database that had been left publicly accessible without proper authentication or access-control configuration since approximately February 2024 or earlier. The vulnerability was independently identified by security researcher 'BobDaHacker' who reported it to the platform operator beginning February 25, 2024, but the operator did not remediate the vulnerability for approximately nine and a half months despite the disclosure attempts. OSINT researcher Ryan Fae publicly disclosed the vulnerability on X on December 3, 2024 with details indicating the scope of the exposure across Ladies.com and the operator's sister platform Senior Dating, which prompted the operator to acknowledge the breach and shut down both platforms on approximately December 4, 2024. The breach was indexed by Have I Been Pwned on December 9, 2024. The breach affected approximately 118,800 users on Ladies.com based on records indexed by breach-tracking services, alongside approximately 765,517 users on Senior Dating for a combined disclosure of approximately 917,000 users across the operator's two platforms. Compromised fields included email addresses, full names, usernames, dates of birth, profile photographs and additional photographs, biographical information, geographic location data with precise latitude and longitude coordinates, sexual orientation, gender, education levels, family structure, relationship statuses, drinking and smoking habits, and tattoo status. The dataset did not include passwords because Firebase authentication is typically managed through linked authentication providers including Facebook rather than through stored credentials. The combination of profile photograph with precise geographic coordinates, sexual orientation, and demographic information creates an exceptionally severe identification and outing risk because affected users can be visually and contextually matched across multiple data points to specific addresses or neighborhoods, with sexual orientation as an explicitly disclosed field rather than an inferred attribute. For affected users, the practical risk profile is exceptionally severe given the LGBTQ+-specific sensitivity of the field set and the precision of the geographic data. The combination of profile photograph with precise GPS coordinates and explicit sexual orientation disclosure creates targeted outing, harassment, blackmail, and physical-safety risk that may be particularly severe for users in family, employment, or jurisdictional environments hostile to LGBTQ+ identity, including users in U.S. states or other jurisdictions with limited LGBTQ+ legal protections, users in religious or family communities where outing carries significant consequences, and users whose employment status could be affected by outing. Affected users who receive extortion or outing-threat attempts should not pay ransom demands because payment does not stop further extortion. Users should document any threatening communications, treat all unsolicited contact referencing Ladies.com or related platforms with extreme caution, and report extortion attempts to local law enforcement. LGBTQ+ users with personal-safety concerns may benefit from contacting LGBTQ+ advocacy organizations including the Trevor Project (1-866-488-7386) and GLAAD's safety resources for confidential support. Affected users in violent-relationship situations may also benefit from contacting the U.S. National Domestic Violence Hotline (1-800-799-7233).
ObscureIQ assessment: Exposure enables harassment, stalking, phishing, and identity linkage. Dating-platform affiliation can also create reputational harm depending on the user’s circumstances.
Breach Impact
The institutional impact on Ladies.com and the broader operator was effectively terminal. Both Ladies.com and Senior Dating were shut down following the December 2024 disclosure, and the case has been widely cited in cybersecurity coverage as illustrating systemic data-protection failures at small dating-platform operators. The reputational impact concentrated within the LGBTQ+-platform and niche-dating sectors, where Ladies.com was one of several lesbian-focused dating platforms. The operator did not provide credit monitoring services or other remediation to affected users. The case has been particularly cited in LGBTQ+ advocacy commentary because the exposure of sexual orientation combined with precise geographic coordinates carries elevated personal-safety risk for users in jurisdictions or family environments hostile to LGBTQ+ identity.
About Ladies.com
Ladies.com was a niche dating platform focused on lesbian matchmaking and social connections, operated by an entity also responsible for Senior Dating (a 40+ general dating platform). As an account-based niche dating service for the lesbian community, Ladies.com maintained user account data including names, email addresses, usernames, dates of birth, profile photographs, biographical information, geographic location data with precise latitude and longitude coordinates, sexual orientation, gender, education levels, family structure, relationship statuses, drinking and smoking habits, tattoo status, and other lifestyle attributes used for matchmaking. The platform's user demographic concentrated in lesbian and queer women, a population for whom dating-platform identification carries materially different risk profiles than for general dating-platform users because of LGBTQ+-specific privacy, safety, and family considerations.
Why They Hold Your Data
Dating platforms collect highly sensitive profile data, photos, messages, subscription records, and relationship-intent information tied to matchmaking and social interaction.
Recent Developments
Ladies.com was shut down on approximately December 4, 2024 following the public disclosure of the Firebase database exposure, and the website is no longer operational. The shutdown also covered Senior Dating, the sister property operated by the same entity. Independent researcher 'BobDaHacker' attempted to disclose the Firebase vulnerability to the operator beginning February 25, 2024, approximately nine months before the public disclosure forced operator action. The case has been widely cited in LGBTQ+-platform cybersecurity coverage as illustrating the elevated risk profile of LGBTQ+ dating-platform exposure and the consequences of operator unresponsiveness to security disclosure. The breach was indexed by Have I Been Pwned on December 9, 2024.
Data Points Exposed
13 verified field types
Date of Birth High
Education Information
Email Address
Family Structure
Gender
Geographic Location
Lifestyle Habits
Physical & Lifestyle Profile
Profile Bio
Profile Photo
Relationship Status
Sexual Orientation High
Username
Field names are shown in full for clarity and search visibility. Canonical machine keys are emitted only in this page’s structured data.
Exploitation & Downstream Threats
Threat Activity:High
Primary downstream threats:
- Targeted phishing campaigns using exposed email addresses
- Doxxing risk from physical address exposure
Threat vectors:
- Identity verification bypass
- Credential fraud & spear-phishing
- Phishing, credential stuffing & account takeover
- Household targeting
- Profile enrichment
- Pattern-of-life analysis & physical surveillance
- Insurance discrimination & targeting
- Social engineering context
- Deepfake & identity document fraud
- Facial recognition & physical identification
- Outing, blackmail & targeted violence
- Cross-platform tracking & credential stuffing
Threat Actor: n/a (Firebase misconfiguration; same researchers as Senior Dating)
n/a (Firebase misconfiguration; same researchers as Senior Dating)
Misconfiguration
Attribution and method are based on available breach intelligence. Reported attack vector: Misconfiguration.
Recommended Actions
If you believe your information may be included:
Enable MFA Everywhere
Turn on multi-factor authentication on email first, then financial accounts.
Report & Recover
If you spot misuse, start an official recovery plan and report fraud.
Frequently Asked Questions
What happened in the Ladies.com breach?▾
Ladies.com, a niche lesbian dating platform, suffered a data breach due to an exposed Firebase database that had been left publicly accessible without proper authentication or access-control configuration since approximately February 2024 or earlier. The vulnerability was independently identified…
What data was exposed?▾
Verified fields include Date of Birth, Education Information, Email Address, Family Structure, Gender, Geographic Location, Lifestyle Habits, Physical & Lifestyle Profile, Profile Bio, Profile Photo, Relationship Status, Sexual Orientation, Username.
What should I do if I was affected?▾
Change reused passwords, enable MFA, and (if identity or financial data is involved) freeze your credit and monitor your accounts.
Sources & References
Every claim on this page is traceable. This breach draws on:
Breach Index
ObscureIQ Intelligence
ObscureIQ proprietary analysis
Protect Yourself
Check If You're Affected
Enter your email to check whether your data appears in this breach. We’ll send a 6-digit code to confirm it’s your address.
Get Free Breach Alerts
Be the first to know when new breaches are disclosed. Free forever — confirm your email with a 6-digit code.
High-Risk? Get an Exposure Audit
Executives, public figures, and high-visibility operators can receive tailored exposure intelligence and hardening guidance.
Request Consultation