OGUsers (2020 breach) Data Breach

What happened

In April 2020, the account hijacking and SIM swapping forum OGUsers suffered their second data breach in less than a year. As with the previous breach, the exposed data included email and IP addresses, usernames, private messages and passwords stored as salted MD5 hashes. A total of 263k email addresses across user accounts and other tables were posted to a rival hacking forum.

Exposed data

Recommended actions

• Change your OGUsers (2020 breach) password immediately, and update it anywhere you reused the same password.
• Enable two-factor authentication on the affected account and on your critical services (email, banking).
• Watch for targeted phishing emails referencing OGUsers (2020 breach) — attackers weaponise breach data quickly.
• Check whether your email address appears in this breach on haveibeenpwned.com.