GSM Hosting Data Breach

What happened

In August 2016, breached data from the vBulletin forum for GSM-Hosting appeared for sale alongside dozens of other hacked services. The breach impacted 2.6M users of the service and included email and IP addresses, usernames and salted MD5 password hashes.

Exposed data

Recommended actions

• Change your GSM Hosting password immediately, and update it anywhere you reused the same password.
• Enable two-factor authentication on the affected account and on your critical services (email, banking).
• Watch for targeted phishing emails referencing GSM Hosting — attackers weaponise breach data quickly.
• Check whether your email address appears in this breach on haveibeenpwned.com.