Swipe Left: Bumble Faces Allegations of Illegally Collecting User Biometric Data

A recent class action lawsuit has been filed against Bumble Inc., the popular online dating and networking application, alleging that the app profits from facial scans collected from its users without proper consent.

Advertisements

In the realm of online dating, users are acutely aware of the need to safeguard their personal information from potential romantic interests. However, what users might not anticipate is the misuse of their data by the very dating apps they entrust. A recent class action lawsuit has been filed against Bumble Inc., the popular online dating and networking application, alleging that the app profits from facial scans collected from its users without proper consent. This lawsuit, filed in an Illinois federal court, contends that Bumble fails to adequately inform users about the purpose and duration of collecting, storing, and using their biometric information during the photo verification process.

According to the lawsuit, Bumble violated the Biometric Information Privacy Act (BIPA) by collecting, storing, and using biometric information without obtaining a written release from the users. The legal action argues that this not only infringes on user privacy but also exposes them to “serious and irreversible privacy risks.” Bumble is accused of specifically collecting and utilizing facial scans during its photo verification process without transparently informing users of the specific purpose and length of term for which their biometric information is being processed.

This revelation is particularly alarming as it involves the capture of a highly sensitive aspect of users’ identities – their facial features. The lawsuit highlights the potential misuse of this data, indicating that Bumble allegedly exposes its users to privacy risks by collecting, using, and disseminating their biometric data to “further enhance” itself and its online app-based platform. Users who had their biometric data stored on the app are left vulnerable to identity theft, unauthorized tracking, and other improper uses.

This class action seeks a jury trial and demands declaratory and injunctive relief, along with both actual and statutory damages for the affected users. This lawsuit follows previous legal actions against Bumble, such as a $1.3 million settlement in 2021 addressing claims of gender discrimination within the app.

The case underscores the growing challenges related to user data protection in the digital age. With the increasing reliance on facial recognition technology, it becomes imperative for companies like Bumble to prioritize transparency and obtain proper consent from users. The potential consequences of failing to do so, as outlined in this class action, highlight the importance of stringent regulations and accountability in the evolving landscape of online privacy, emphasizing the need for users to be vigilant about the handling of their personal data by the apps they use.he illicit use of stolen biometric data by cybercriminals adds another layer of concern. If this sensitive information were to fall into the wrong hands, cybercriminals could exploit it for identity theft, unauthorized access, or other malicious activities, posing a direct threat to the affected users. This underscores the urgency for robust security measures and ethical data practices to safeguard users against potential cyber threats associated with the mishandling of biometric information.

Join 16 other subscribers

Advertisements

audible - now streaming: podcasts, originals, and more. Start your free trial.

Advertisements

Amazon business - everything you love about amazon. for work - learn more

Advertisement

Advertisements

Trending Topics

AI Business Consumer cyber-security cybersecurity Email Gaming Government Hacking Home Innovation Malware Mobile Phishing Privacy Scams security Shopping technology Vulnerabilities

More News

Sometimes Life Bites Like a Gator, Sometimes You Bite Back

Today starts a new chapter in my life, so also comes a new chapter for the Cyber News Gator.

Podcast Corner

Cybersecurity Awesomeness Podcast – Episode 180 – Cybersecurity Awesomeness Podcast

In this episode of the Cybersecurity Awesomeness Podcast, host Chris Steffen shares key takeaways from his recent attendance at the Cloudflare Connect conference in San Francisco, focusing on the critical PHP remote code execution vulnerabilities (CVE-2026-109618 / CVE-2026-109619, dubbed "PHP2Shell").   Steffen highlights a jarring insight directly from Cloudflare leadership: from the moment the vulnerability was publicly announced, it took just 17 to 22 minutes for automated AI bots to begin actively exploiting it in the wild. Walking step-by-step through a best-case human patch cycle—reading the CVE, conducting risk assessments, securing emergency change approvals, and staging code—Steffen demonstrates that even the fastest human response takes at least 20 minutes, during which millions of automated attack attempts have already launched. Because security patching operates at human speed while threats move at AI speed, Steffen urges organizations to rely heavily on defense-in-depth and compensating controls. He outlines four essential stopgaps: WAF edge-layer virtual patching (such as Cloudflare’s automated rule deployments), network segmentation, Runtime Application Self-Protection (RASP), and aggressive attack-surface reduction.  

Leave a Reply

Discover more from Cyber News Gator

Subscribe now to keep reading and get access to the full archive.

Continue reading