News
Grindr security flaw exposes user location data
the breach put more than three million daily users at risk

(Logo courtesy of Grindr)
More than three million of Grindr’s daily users were temporarily put at risk because of a major security flaw in the app that was exposed by a third-party site.
C*ckblocked, a now-defunct site that allowed Grindr users to view who blocked them by entering a Grindr user name and password, was able to access user information from Grindr’s Application programming interface (API). The information included email addresses, deleted photos, personal messages and the location of users.
Trever Faden, founder of C*ckblocked, told NBC that it would be easy for anyone to access a user’s private information.
“One could, without too much difficulty or even a huge amount of technological skill, easily pinpoint a user’s exact location,” Faden told NBC.
In a separate security issue, Faden claimed that Grindr users’ location, which must be inputed directly into the app and not via a third-party site, was not encoded and could be accessed by anyone monitoring public online traffic.
Faden emphasized that the ability to find a user’s location was “a feature, not a bug.”
NBC reports that two independent cybersecurity researchers confirmed the security flaw.
After Faden informed Grindr of the security issues, Grindr blocked the flaw that allowed third-party sites like C*ckblocked to receive data.
Grindr released a statement advising users not to use their username and password for other sites.
“Grindr moved quickly to make changes to its platform to resolve this issue. Grindr reminds all users that they should never give away their username and password to any third parties claiming to provide a benefit, as they are not authorized by Grindr and could potentially have malicious intent,” the statement reads.
However, Grindr denied that user location isn’t encoded.
“Grindr is a location-based app. Location is a critical element of our social network platform. This allows our users to feel connected to our community in a world that would seek to isolate us. That said, all information transmitted between a user’s device and our servers is encrypted and communicated in a way that does not reveal your specific location to unknown third parties,” Grindr’s Chief Technology Officer Scott Chen told the Huffington Post.
The company also released a statement on Twitter to inform users that the problems have been addressed and to be safe using their service.
As a company that serves the LGBTQ community, we understand the delicate nature of our users’ privacy. Ensuring safety and security of our users is of paramount importance to us and will continue to be our top priority. pic.twitter.com/vD2zXqxSr0
— Grindr (@Grindr) March 29, 2018
The flaw is similar to the one in the Facebook/Cambridge Analytica scandal, which allegedly exposed the personal data of 50 million users.
Federal Government
Markwayne Mullin confirmed as next DHS secretary
Okla. senator to succeed Kristi Noem
The U.S. Senate confirmed Markwayne Mullin as the next secretary of Homeland Security on Monday, as the agency continues to grapple with what lawmakers have described as a “never-ending” funding standoff, with Democrats attempting to withhold funding from one of the nation’s largest and most costly agencies.
Mullin — a Republican senator from Oklahoma, former mixed martial arts fighter, and plumbing business owner — was confirmed in a 54–45 vote. Two Democrats — U.S. Sens. John Fetterman (D-Pa.) and Martin Heinrich (D-N.M.) — sided with Republicans in supporting his confirmation.
The new agency head is expected to follow the policy direction set by President Donald Trump, emphasizing stricter immigration enforcement. This includes proposals to support immigration agents at polling sites and to cut funding to so-called “sanctuary cities.”
Mullin replaces Kristi Noem, who was fired earlier this month following a widely scrutinized 2-day congressional hearing on Capitol Hill.
During the hearing, Noem faced intense questioning over her response to several crises, including the fatal shooting of two American citizens in Minneapolis by U.S. Immigration and Customs Enforcement agents, a $220 million border security advertising campaign that featured her on horseback near Mount Rushmore amid one of the largest federal workforce reductions in U.S. history, and the federal response to major natural disasters such as the July 2025 Texas floods and Hurricane Helene in 2024.
Noem had previously drawn criticism for a series of policy decisions in South Dakota that broadly focused on restricting the rights of LGBTQ individuals. In 2023, she signed House Bill 1080, banning gender-affirming medical care for transgender minors. She also signed legislation and executive orders restricting trans athletes’ participation in women’s sports, as well as the state’s “Religious Freedom Restoration Act,” which critics argued enabled discrimination against LGBTQ individuals. Additionally, the state canceled contracts related to LGBTQ support services — including suicide prevention and health care navigation programs‚ and later agreed to a $300,000 settlement with trans advocacy group, The Transformation Project.
Despite her removal from DHS, Noem will remain in the Trump-Vance administration as a special envoy for the “Shield of the Americas,” an initiative aimed at promoting U.S. influence in the Western Hemisphere, including efforts to counter cartel networks, reduce Chinese influence, and manage migration.
The new head of DHS has served in Congress since 2013, in both houses of the federal legislature. While in the Senate and a member of the Health, Education, Labor, and Pensions (HELP) Committee, Mullin has been a vocal critic of policies aimed at expanding LGBTQ inclusion. He led a group of lawmakers in urging the Administration for Community Living to reverse a rule requiring states to prioritize Older Americans Act services based on sexual orientation and gender identity, arguing the policy could have unintended consequences.
Mullin also makes history as the first Native American — and a citizen of the Cherokee Nation — to lead the Department of Homeland Security. He was also among the 147 Republicans who voted to overturn the 2020 presidential election results despite no evidence of widespread fraud, and was present in the U.S. House of Representatives chamber on Jan. 6.
A gay man was murdered in Petersburg, Va., on March 13.
Shyyell Diamond Sanchez-McCray, who was also known as Saamel and Mable, was a drag queen who won the Miss Mayflower EOY pageant in 2015. Reports also indicate Sanchez-McCray, 42, was a well-known community activist in Virginia and in North Carolina.
Local media reports indicate police officers found Sanchez-McCray shot to death inside a home in Petersburg.
Sanchez-McCray’s brother, Jamal Mitchell Diamond, in a public statement the Washington Blade received from Equality Virginia and GLAAD, said Sanchez-McCray was not transgender as initial reports indicated.
“Our family has always embraced the fullness of who he was. He used the names Saamel, Shyyell, and Mable interchangeably, and we honor all of them. There is no division within our family regarding how he is being represented — only a shared commitment to preserving his truth with love and respect,” said Diamond.
“He was also deeply committed to community work through Nationz Foundation, where he worked and completed multiple state-certified programs to support marginalized communities,” added Diamond. “That work meant a great deal to him.”
Authorities have not made any arrests.
The Petersburg Bureau of Police has asked anyone with information about Sanchez-McCray’s murder to call Petersburg-Dinwiddie Crime Solvers at 804-861-1212.
District of Columbia
Trans Day of Visibility events planned
Rally on the National Mall scheduled for Saturday
The Christopher Street Project has a number of events planned for the 2026 Trans Day of Visibility, including a rally on the Mall and an “Empowerment Ball” at the Eaton Hotel. Plenaries, panel discussions and meetings with members of Congress are scheduled in the three days of programming.
Announced speakers include N.H. state Rep. Alice Wade; Commissioner of the Metropolitan Water Reclamation District of Greater Chicago Precious Brady-Davis; activist and performer Miss Peppermint (“RuPaul’s Drag Race”); Lexington, Ky. Councilwoman Emma Curtis; Rabbi Abby Stein; D.C. activist and host Rayceen Pendarvis; Air Force Master Sgt. Logan Ireland; among other leaders, advocates and performers.
Conference programming on Thursday and Friday includes an educational forum and a Capitol Hill policy education day. Registration for the two-day conference has closed.
The “Trans Day of Visibility PAC Reception” is scheduled for Thursday, March 26 from 7:30-9 p.m. at As You Are (500 8th St., S.E.). Special guests include Rep. Dina Titus (D-Nevada) and Rep. Delia Ramirez (D-Ill.). Tickets are available at christopherstreetproject.org starting at $25.
The National Council of Jewish Women and the Christopher Street Project host a “Trans Day of Visibility Shabbat” on Friday, March 27 from 7-8 p.m. at Sixth & I (600 I St., N.W.). The service is to be led by Rabbi Jenna Shaw and Rabbi Abby Stein.
The “Now You See Me: Trans Empowerment Social & Ball” is scheduled for Friday, March 27 from 6-11 p.m. at the Eaton Hotel (1201 K. St., N.W.). The trans-themed drag ball is hosted by the Marsha P. Johnson Institute with support from the D.C. Mayor’s Office of LGBTQ+ Affairs, the Capital Ballroom Council, the Christopher Street Project, the Center for Black Equity, Generation for Common Good, and Parenting is Political. RSVP online at christopherstreetproject.org.
The National Transgender Day of Visibility Rally is scheduled for Saturday, March 28 on the National Mall at 11 a.m. The rally will include speakers and performances. Following the rally, attendees are encouraged to participate in the “No Kings” rally being held at Anacostia Park.

