Data breach
SuperVPN & GeckoVPN
20 339 937 accounts exposed in a breach dated 2021-02-25.
Breached2021-02-25Added to HIBP2021-02-28 UTCUpdated by HIBP2021-02-28 UTCAccounts20 339 937Domain—
Verified
What happened in Have I Been Pwned’s words
In February 2021, a series of "free" VPN services were breached including SuperVPN and GeckoVPN, exposing over 20M records. The data appeared together in a single file with a small number of records also included from FlashVPN, suggesting that all three brands may share the same platform. Impacted data also included email addresses, the country logged in from and the date and time each login occurred alongside device information including the make and model, IMSI number and serial number.
Exposed data as HIBP classifies it
- Device information
- Device serial numbers
- Email addresses
- Geographic locations
- IMSI numbers
- Login histories
How HIBP qualifies it
- HIBP verified that the data came from this service.
HIBP names no domain for this breach.
Source: Have I Been Pwned (CC BY 4.0)
Copied from HIBP 2026-11-05 03:50 UTC