Gab Data Breach

What happened?

In February 2021, the alt-tech social network service Gab suffered a data breach . The incident exposed almost 70GB of data including 4M user accounts, a small number of private chat logs and a list of public groups and public posts made to the service. Only a small number of accounts included email addresses and / or passwords stored as bcrypt hashes with a total of 66.5k unique email addresses being exposed across the corpus of data.

When did it happen?

The breach date in the public record is February 26, 2021. The record was added to the catalogue on March 3, 2021 and last updated there on March 3, 2021.

What information was reported as exposed?

• Avatars
• Email addresses
• Names
• Passwords
• Private messages
• Usernames

These are incident-level categories. The record does not prove that every category was exposed for every affected person.

Who may be affected?

This record may be relevant to people who had an account or other relationship with Gab or used gab.com around February 26, 2021. A catalogue entry does not establish that every customer was affected or that every listed data category applied to each person. Compare the record with an official notice addressed to you.

What should you do?

Choose actions that match the information involved. If you find signs that someone is using your identity, the Federal Trade Commission provides a personal recovery plan at IdentityTheft.gov.