Skip to content

SuperVPN & GeckoVPN

Disclosed Feb 28, 20215 years ago20,339,937 accountsUnverified

In February 2021, a series of "free" VPN services were breached including SuperVPN and GeckoVPN , exposing over 20M records. The data appeared together in a single file with a small number of records also included from FlashVPN, suggesting that all three brands may share the same platform. Impacted data also included email addresses, the country logged in from and the date and time each login occurred alongside device information including the make and model, IMSI number and serial number.

What is known

People affected20,339,937 (accounts in the leaked data, per Have I Been Pwned)
DisclosedFeb 28, 2021
HappenedFeb 25, 2021
AttackNot stated
Data exposedEmails, Location
SectorTech
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Check your emailHave I Been Pwned

Sources

Source
Have I Been Pwned: SuperVPN & GeckoVPNhaveibeenpwned.com · Aggregator

Notices filed

WhereFiledPeople
Have I Been Pwnedaccounts in the dataFeb 28, 202120,339,937
History of this record
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about SuperVPN & GeckoVPN

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.