DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

Statement by CasualX in response to “false statements” by vpnMentor

Posted on June 18, 2020 by Dissent

Their press release, in its entirety:

TORONTO, June 18, 2020 /PRNewswire/ — CasualX, a leading hookup app clarified false statements in a recent report by vpnMentor’s research team. According to the report, CasualX is one of the affected apps in a data breach incident discovered by security researchers on May 24.

The research was led by Noam Rotem and Ran Locar at vpnMentor, and they reported an unprotected Amazon Web Services ‘buckets’ with over 20 million files linked to 100,000s users from a number of niche dating and hook up apps. The apps were built for people with alternative lifestyles and particular tastes, such as ‘Cougars,’ queer dating, fetishes, and group sex. Based on the research, they claimed that these apps share a common developer.

“Once we learned of this, our team took quick steps to determine the facticity of the reported problem. After thorough investigation, we want to make an official announcement based on our findings,” said Jeffrey Cheung, co-founder of CasualX.

Clarifications from CasualX team quoted as follows:

#1, As of now, we have encountered no data breach in any form. All data have been kept safe with us.

#2, We do not use AWS to store our users’ data. All data of CasualX users are stored on a SoftLayer account. SoftLayer is a product of IBM.

VpnMentor’s statement:
“Based on our research, the apps share a common developer. As a result, user media from each app had been stored on a single Amazon Web Services (AWS) account.”

#3, We have no relationship with other apps mentioned by vpnMentor. We do not share the common developer with other affected apps.

VpnMentor’s statement:
“Based on our research, it appears the apps share a common developer, for the following reasons:
Gaydaddybear.com is hosted on the same AWS account as Ghuntapp.com
Similar branding, web design, logos across multiple app websites
Some of the apps list “Cheng Du New Tech Zone” as a developer on Google app store
“

#4, We do not store voice messages or any other form of audio files. In fact, we haven’t applied the audio function to the app.

VpnMentor’s statement:
“The files were incredibly sensitive, uploaded from user accounts, and exposing details of user profiles and private conversations happening on the apps.
These included media files, such as:
Images and photos
Voice messages and audio recordings

“We appreciate the efforts made by vpnMentor team, but CasualX shouldn’t have been included in this list. We have already sent an email to them to ask about what went wrong” said Jeffrey Cheung, “We are dedicated to providing a secure channel to all the users, and that’s what we have been doing all these years. We don’t want any user on CasualX to get confused by this data breach drama.”

Related:

  • 845GB of racy dating app records exposed to entire… June 16, 2020
  • The Ransomware Superhero of Normal, Illinois November 3, 2019
  • Misconfigured cloud storage bucket exposed Pfizer… October 20, 2020
  • Conversation with a “Nam3L3ss” Watchdog, Part 2: Methods December 23, 2024
  • Kept in the Dark -- Meet the Hired Guns Who Make… February 4, 2025
  • The Secret IRS Files: Trove of Never-Before-Seen… June 10, 2021
Category: Business SectorCommentaries and AnalysesOf Note

Post navigation

← Covid-19 Relief: North Korea Hackers Lazarus Planning Massive Attack on US, UK, Japan, Singapore, India, South Korea?
Suspected UMPC hacker accused of stealing employee data from 65,000 UPMC employees arrested in Detroit →

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • Marquette County Medical Care Facility discloses data breach
  • Industry Letter – June 23, 2025: Impact to Financial Sector of Ongoing Global Conflicts
  • MNGI Digestive Health settles class action lawsuit stemming from BlackCat attack
  • Four REvil ransomware members released after time served on carding charges
  • Why Dumping Sensitive Data on Network Shares is a Liability
  • A militarily degraded Iran may turn to asymmetrical warfare – raising risk of proxy and cyber attacks
  • Pro-Russian hackers disrupt Dutch government websites ahead of NATO summit
  • Iran-Linked Threat Actors Leak Visitors and Athletes’ Data from Saudi Games
  • UK: Oxford City Council still investigating cyberattack from earlier this month
  • Steelmaker Nucor Says Hackers Stole Data in Recent Attack

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • How Internet of Things devices affect your privacy – even when they’re not yours
  • Sky Views Personal Data as a Potential Weapon in IPTV Piracy War
  • Florida Used a Nationwide Surveillance Camera Network 250 Times To Aid in Immigration Arrests
  • Federal Court Strikes Down HIPAA Reproductive Health Care Privacy Rule
  • The Markup caught 4 more states sharing personal health data with Big Tech
  • Privacy in the Big Sky State: Montana’s Consumer Privacy Law Gets Amended
  • UK Passes Data Use and Access Regulation Bill

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net

Mastodon: Infosec.Exchange/@PogoWasRight

Signal: +1 516-776-7756

DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.