OGUsers (2019 breach) Data Breach

What happened?

In May 2019, the account hijacking and SIM swapping forum OGusers suffered a data breach . The breach exposed a database backup from December 2018 which was published on a rival hacking forum. There were 161k unique email addresses spread across 113k forum users and other tables in the database. The exposed data also included usernames, IP addresses, private messages and passwords stored as salted MD5 hashes.

When did it happen?

The breach date in the public record is December 26, 2018. The record was added to the catalogue on May 19, 2019 and last updated there on April 4, 2020.

What information was reported as exposed?

• Email addresses
• IP addresses
• Passwords
• Private messages
• Usernames

These are incident-level categories. The record does not prove that every category was exposed for every affected person.

Who may be affected?

This record may be relevant to people who had an account or other relationship with OGUsers (2019 breach) or used ogusers.com around December 26, 2018. A catalogue entry does not establish that every customer was affected or that every listed data category applied to each person. Compare the record with an official notice addressed to you.

What should you do?

Choose actions that match the information involved. If you find signs that someone is using your identity, the Federal Trade Commission provides a personal recovery plan at IdentityTheft.gov.