From one of the linked articles (emphasis mine):
The data includes highly sensitive and detailed self-reported information, such as usernames, gender, age, location, activity history, lifestyle, height, eye color, hair color, and other physical appearance traits, income range, education, marital status, religion, and even self-assessed IQ, among many other fields.
L M A O
edit: holy shit, literally the next paragraph
Notably, the dataset also contains numerous profile photos, along with embedded EXIF metadata that reveals precise GPS coordinates, device information, timestamps, and other identifying details.
Not stripping EXIF data is a truly astonishing level of incompetence 
...no wait, that's not even the best part:
Root said she contacted a hacker who helped to exfiltrate the data. However, no hacks were required – all it took was a simple URL trick of adding “download-all-users/” to the top-level domain.






