Tinder’s privacy breach lasted much longer than the company claimed