Back to Radar
SU

SuperVPN & GeckoVPN

High

A 2021 data breach of VPN providers exposed over 20 million user records including sensitive device and login information.

Records exposed
20,339,937 records
Breach date
Breach Feb 25, 2021
Last update
Updated Feb 28, 2021

What data was exposed?

Fields reported as compromised in this breach record.

Device informationDevice serial numbersEmail addressesGeographic locationsIMSI numbersLogin histories

Why does this breach matter?

In-depth analysis of the breach and its implications.

In February 2021, SuperVPN, GeckoVPN, and potentially FlashVPN experienced a data breach that exposed over 20 million user records. The compromised information included email addresses, device specifics (such as model and serial numbers), login histories inclusive of timestamp and geographic location, and IMSI numbers. The breach highlighted potential security risks related to shared platforms among VPN services.

Impact Analysis

Understanding the scope and consequences of this breach.

User Impact
The exposure of login histories and device information could lead to privacy breaches and misuse of accounts.
Business Impact
The affected organizations faced reputational harm and the challenge of mitigating user trust issues.
Affected Sectors
  • Technology
  • Telecommunications
Geographic Impact
  • Global

What You Should Do

Recommended actions to take in response to this breach.

If You Were Affected

  • Reset your VPN account credentials immediately.
  • Review devices for any suspicious signs of tampering or misuse.
  • Monitor email accounts for potential phishing attempts.

Preventive Measures

  • Refrain from using 'free' VPN services without credible security certifications.
  • Regularly update security software and firmware on devices.
  • Be cautious providing sensitive data to online platforms.

Frequently Asked Questions

Common questions about this breach and what it means for you.

While VPN services can enhance privacy, select reputable providers with transparent security practices.

Attribution

Additional attribution provided with the breach record.

redredred@riseup.net