Every public data breach

47 disclosed this week · 26,367 on record

SuperVPN & GeckoVPN

Disclosed Feb 28, 202120,339,937 accountsUnverified

In February 2021, a series of "free" VPN services were breached including SuperVPN and GeckoVPN , exposing over 20M records. The data appeared together in a single file with a small number of records also included from FlashVPN, suggesting that all three brands may share the same platform. Impacted data also included email addresses, the country logged in from and the date and time each login occurred alongside device information including the make and model, IMSI number and serial number.

What is known

People affected20,339,937 (accounts in the leaked data, per Have I Been Pwned)
DisclosedFeb 28, 2021
HappenedFeb 25, 2021
AttackNot stated
Data exposedEmailsLocation
SectorTech
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Check your emailHave I Been Pwned

Sources

Notices filed

History of this record
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about SuperVPN & GeckoVPN