SuperVPN & GeckoVPN data breach
From Breaches, in the HARD wiki · Updated
This article is about the February 2021 breach of SuperVPN & GeckoVPN. For every breach, see Breaches.
The SuperVPN & GeckoVPN data breach exposed 20,339,937 accounts in February 2021. The data taken includes email addresses, device information, device serial numbers and geographic locations and 2 more kinds of data.[1]
Have I Been Pwned verified it and added it to its search on 28 Feb 2021, within a month. It is the 92nd largest of the 618 breaches in HARD’s list.
What was exposed
SuperVPN & GeckoVPN’s breach included 6 kinds of data. What each lets criminals do:
| Data | What it’s used for |
|---|---|
| Email addresses | Expect scam emails that name the company to look genuine. |
| Device information | Personal details that make scam messages more convincing. |
| Device serial numbers | Personal details that make scam messages more convincing. |
| Geographic locations | Roughly where you live. |
| IMSI numbers | Personal details that make scam messages more convincing. |
| Login histories | Personal details that make scam messages more convincing. |
What to do
- Check whether you’re in it.Search your email address on Have I Been Pwned. It tells you which breaches it appears in, SuperVPN & GeckoVPN among them, without showing the data.
- Distrust messages that mention SuperVPN & GeckoVPN.Scammers use breach data to sound genuine. Don’t click links in emails or texts about the breach; go to the site yourself.
- Expect the data to resurface.Breach data is sold and combined with other leaks for years. Stay wary of messages that know a little too much about you.
Timeline
- : the breach, as best it can be dated.
- : Have I Been Pwned verifies the data and adds it to its search, within a month.
Similar breaches
Breaches that leaked the same kinds of data, closest in time:
- Twitter (200M), January 2021, 212 million accounts
- LinkedIn Scraped Data (2021), April 2021, 126 million accounts
- Luxottica, March 2021, 77 million accounts
- AT&T, August 2021, 49 million accounts
- Domino's India, March 2021, 23 million accounts
- ParkMobile, March 2021, 21 million accounts
See Breaches for all 618, and Updates for keeping your devices patched.
References
- ^ Troy Hunt. “SuperVPN & GeckoVPN”, Have I Been Pwned, added 28 Feb 2021. Breach data licensed CC BY 4.0.
External links
- Have I Been Pwned, to check your email address