WhereIsAtlas · Technology

How Online Dating Companies Die

A breach, a law and a market shift killed three of the first generation's biggest names. The most famous scandal of them all killed nothing.

Online dating's first generation died in three distinct ways. Yahoo Personals was killed by a market shift it could not answer — free sites, then mobile apps. Craigslist Personals was killed by legislation, when FOSTA/SESTA passed in 2018 and Craigslist closed the section rather than police it. AdultFriendFinder was hit by a 2016 breach of 412 million accounts and its parent went bankrupt. And Ashley Madison — the site whose 2015 hack is the one everybody remembers — is still running, and rebranded in 2026. The breach is the story people tell. It is the least fatal of the three mechanisms.

The assumption that needs testing

The Ashley Madison hack is the most famous data breach in the history of online dating, and the instinctive conclusion is that it damaged the industry — that people, faced with 36 million users' secrets dumped on the open internet, backed away from dating sites.

The record does not support that. In the years after 2015 the online dating market kept growing, and its centre of gravity shifted decisively to mobile apps. Whatever the hack damaged, it did not damage the category.

So it is worth separating the question people ask — "did the hack kill online dating?" — into the one that actually has an answer: what does kill an online dating company? The first generation supplies three distinct answers, and the breach is only one of them.

Mechanism one: the market moves and you do not

Yahoo Personals was one of the largest paid dating services of the desktop era, and it closed in 2010 — five years before the Ashley Madison hack existed. It was not breached into failure. It was overtaken.

The sequence is the familiar one for the period: free sites undercut the paid subscription model, and then the smartphone changed the product entirely. Tinder arrived in 2012 and turned dating into a mobile, swiping, freemium habit; by 2019 it was the highest-grossing mobile app in the world [5]. A paid web service with a monthly subscription could not compete with that shape of product.

This is the most common death in the sector and the least dramatic: nothing illegal happens, nobody is exposed, and the company simply stops being where the users are.

Mechanism two: the law changes and you comply

Craigslist Personals died differently. It was free, enormous and unpoliceable, and in April 2018 the US Congress passed FOSTA/SESTA — legislation that carved an exception into Section 230 of the Communications Decency Act so that platforms could be held liable for facilitating sex trafficking.

Craigslist's response was not to build a moderation regime. It closed the personals section outright. Backpage, the classifieds site that had become the main commercial channel for such advertising, was seized by federal authorities the same month.

There is a genuine argument on both sides of that law, and this site reports it rather than settling it: supporters said it was necessary to hold platforms accountable for trafficking, while civil-liberties organisations and sex-worker advocates argued it chilled lawful speech and pushed vulnerable people into less safe channels. What is not in dispute is the mechanism — a statute changed the liability exposure, and a company chose closure over compliance.

Mechanism three: the breach

This is the one that makes headlines, and the record is more mixed than the headlines suggest.

AdultFriendFinder was reported to have exposed 412 million accounts in 2016 — a larger breach than Ashley Madison's — and its parent company's fortunes collapsed into bankruptcy [4]. That is the breach working as people imagine it does: catastrophic, compounding, fatal.

Ashley Madison took a comparable hit the year before: 36 million users' profile information exposed in 2015 [2]. But it did not close. It settled with the FTC, the District of Columbia and 13 states in December 2016 for $1,657,000 [1], kept trading, and in February 2026 rebranded to sell "discreet dating" instead of affairs [3].

So even within the breach mechanism the outcome is not determined by the size of the leak. What differed was the nature of the business underneath it — and, in Ashley Madison's case, a customer base willing to keep paying for the thing it sold.

The distinction that matters most

There is a fourth thread running through the Ashley Madison case that is easy to fold into the breach and should not be. The hack was a crime committed against the company and its users. The settlement was about what the company did to its own customers.

Regulators alleged that Ashley Madison created thousands of fake user profiles, misrepresented the strength of its security, and sold a "Full Delete" option it did not always carry out [1]. Those are the company's own acts, not the hackers'. For a business whose product was secrecy, being found to have faked the secrecy is the more damaging finding — and it did not require a single byte to be stolen.

What the cluster shows

Put the five businesses side by side and the pattern is not "breaches kill dating companies." It is that a company dies when the thing it was selling stops being credible or stops being reachable:

- Yahoo Personals sold a subscription to a web page, and lost to free sites and then to phones. - Craigslist Personals sold frictionless access, and lost to a statute. - AdultFriendFinder sold access to an adult network, and lost to a breach and bankruptcy. - Ashley Madison sold discretion, was found to have faked it — and survived anyway, by finding new customers and a new label for the same product.

The breach is the memorable mechanism because it is dramatic and criminal. On this evidence it is also the one a company can survive — provided it still has something people want to buy.

Where to read the details

Each business in this cluster has its own entry — Ashley Madison, AdultFriendFinder, Craigslist Personals, Established Men and Yahoo Personals — linked from the profile list above. Read together, they cover the three mechanisms, plus the one case where none of them applied and the company simply found a new label for the same product.

Entries in this story

Sources

  1. Owners of Ashley Madison Enter Into Settlement with District, Other States, and FTC Concerning Data Breach — Office of the Attorney General for the District of Columbia (2026-09-19) ↩
  2. Operators of AshleyMadison.com Settle FTC, State Charges Resulting From 2015 Data Breach that Exposed 36 Million Users' Profile Information — Federal Trade Commission (2026-09-19) ↩
  3. Ashley Madison is rebranding from 'affairs' to 'discreet dating' — USA TODAY (2026-09-19) ↩
  4. Adult Websites Hacked, 412 Million Users Exposed — Forbes (2026-09-19) ↩
  5. How Tinder Became the Highest Grossing Mobile App of 2019 — Nasdaq (2026-09-19) ↩