OGUsers (2021 breach) Data Breach

What happened

In April 2021, the account hijacking and SIM swapping forum OGusers suffered a data breach, the fourth since December 2018. The breach was subsequently sold on a rival hacking forum and contained usernames, email and IP addresses and passwords stored as either salted MD5 or argon2 hashes. A total of 348k unique email addresses appeared in the breach.

Exposed data

Recommended actions

• Change your OGUsers (2021 breach) password immediately, and update it anywhere you reused the same password.
• Enable two-factor authentication on the affected account and on your critical services (email, banking).
• Watch for targeted phishing emails referencing OGUsers (2021 breach) — attackers weaponise breach data quickly.
• Check whether your email address appears in this breach on haveibeenpwned.com.