Back to Radar
OG

OGUsers (2019 breach)

Medium

OGUsers, a forum platform, experienced a breach in 2019 revealing personal data, including emails and passwords of over 161k records.

Records exposed
161,143 records
Breach date
Breach Dec 26, 2018
Last update
Updated Apr 4, 2020
Source

What data was exposed?

Fields reported as compromised in this breach record.

Email addressesIP addressesPasswordsPrivate messagesUsernames

Why does this breach matter?

In-depth analysis of the breach and its implications.

In May 2019, the data compromise at OGUsers, a platform dedicated to account trading and SIM swapping discussions, was revealed when an unauthorized party accessed and leaked a database backup from December 2018. This breach exposed sensitive information, including email addresses, usernames, IP addresses, private messages, and passwords secured using salted MD5 hashing. A total of 161,143 records were compromised across 113,000 unique forum users and other database entries. The incident highlights the importance of effective data security measures and secure password storage practices.

Impact Analysis

Understanding the scope and consequences of this breach.

User Impact
Users experienced exposure of sensitive personal information, including hashed passwords.
Business Impact
Damage to reputation, potential user attrition, and increased scrutiny on protective measures.
Affected Sectors
  • Online Communities
  • Cybersecurity
Geographic Impact
  • Global

What You Should Do

Recommended actions to take in response to this breach.

If You Were Affected

  • •Change your OGUsers account password immediately.
  • •Update other accounts with identical or similar passwords to ensure their security.
  • •Enable monitoring for unauthorized access attempts to your email account.

Preventive Measures

  • •Use unique, strong passwords for every account paired with a password manager.
  • •Employ two-factor authentication for additional security.
  • •Regularly monitor accounts for any signs of unauthorized access or unusual activities.

Frequently Asked Questions

Common questions about this breach and what it means for you.

The breach disclosed email addresses, usernames, hashed passwords, IP addresses, and private messages of users.