- A threat actor claims to have released a 2.5GB database allegedly linked to HER, a dating app built for queer women, nonbinary, and trans users.
- The alleged database reportedly appeared for free on an underground forum, posted alongside hostile comments about the LGBTQ+ community.
- No independent researcher has confirmed the leak yet, and there is no public proof that HER’s own systems were hacked.
A threat actor has allegedly posted a 2.5GB database tied to HER, a dating and community platform built for queer women, nonbinary, trans and gender nonconforming users. Dark Web Intelligence first flagged the claim. It reported that the file was shared for free on an underground forum.
According to Dark Web Intelligence, the actor attached hostile language about the LGBTQ+ community to the post. That detail hints the leak may carry a hateful motive, not just a money making one.
A leak claim and a confirmed breach are two different things, though. No independent researcher has verified the 2.5GB file so far. Nobody can confirm if the data came from HER’s own servers, an old database, a linked third party, or another source. Readers should treat the claim carefully until more proof surfaces.
Details of the Alleged Leak
Dark Web Intelligence shared the original report on X, the platform once known as Twitter. The post states the file totals 2.5GB and names HER as the source. The actor reportedly gave the data away for free instead of selling it. That choice often points to an ideological motive rather than a profit driven one. Hostile language about the LGBTQ+ community supports that idea, based on the report.
At the time of writing, no cybersecurity outlet has confirmed the file’s contents. No researcher has proven the data truly belongs to HER users. The dataset’s age, origin and accuracy all remain unknown for now.
Why the Claim Raises Safety Concerns
HER serves a community where a leak carries extra risk. Exposing someone’s membership on a queer dating app can hurt them far more than a typical password leak.
HER’s support pages describe risks like sextortion and suspicious activity on the app. These pages show that HER already expects some safety threats on its platform. The company already asks users to report suspicious profiles. It also tells users to save evidence whenever something feels wrong, according to HER’s help center. This existing guidance shows HER takes user safety seriously, even before this leak claim surfaced.
If the alleged database truly holds real user details, bad actors could use it to harass or impersonate people. Usernames, contact details, photos, or location data turn dangerous when tied to someone’s presence on an LGBTQ+ platform.
The damage would not stop at stolen passwords. Someone’s LGBTQ+ identity could get exposed to family, coworkers, or strangers who mean harm. In some places, that kind of exposure can also carry legal or social danger. Attackers could also use leaked details to craft convincing phishing messages or coercion attempts. A scammer with real profile details can sound far more believable than a random stranger.
A dark web actor also claimed to have stolen data from Nicaragua’s Alcaldía de Managua, including names, emails, document IDs, and application dates. Authorities have not confirmed the breach, and the dataset’s authenticity remains unverified.
Public app store listings for HER show the type of information the platform usually collects, based on its Google Play and Apple App Store pages. Those listings mention profile details, photos, and location-based matching features. That does not confirm those exact details sit inside the alleged file, though.
What Remains Unconfirmed
Right now, the evidence proves only one thing. A threat actor claims to hold and share a 2.5GB file linked to HER. That claim does not prove how the data was collected. It also does not prove how old the file is, or whether it truly came from HER’s systems.
HER has not issued a public statement addressing the claim as of this report. Independent researchers have not published a verification of the file either. No timeline exists yet for when that confirmation might arrive.
Treat this incident as an unverified leak claim for now, not a confirmed breach. Wait for confirmation from HER, independent researchers, or other trusted sources before assuming the worst. DatingScout’s review of HER shows how popular the platform is among LGBTQ+ users. That popularity raises the stakes if researchers later confirm the claim.
If the dataset gets verified, the leak could turn into a real privacy and safety problem for HER’s users. Members could face harassment, doxxing or targeted phishing tied to their sexual orientation or gender identity. Some users could also face unwanted exposure to people in their personal or professional lives.
Stay alert if you use HER. Watch for phishing messages that reference details from your profile. Review your privacy and blocking settings inside the app. Report anything that looks suspicious to HER’s support team right away.
The claim remains unproven for now. Still, the risk to a vulnerable community is real enough to take seriously. Keep an eye out for updates from HER or trusted security researchers in the coming days.
