SuperVPN Data Breach exposes 360 Million user data records online
A well-known free VPN service, SuperVPN , is facing serious allegations of leaking more than 360 million user data records online. The breach has exposed a vast amount of sensitive information, including email addresses, original IP addresses, geolocation records, unique user identifiers, and references to visited websites.
The scale of the incident is staggering, considering that the SuperVPN service has been downloaded over 100 million times worldwide through the Google and Apple app stores. Security experts are highlighting the need for users to be cautious and choose a trustworthy VPN service in light of this breach, which serves as a wake-up call.
Cybersecurity researcher Jeremiah Fowler, who discovered and reported on the breached database, found a publicly exposed database associated with the SuperVPN app. This database contained over 133 GB of data, including personal user information such as IP locations, servers used, unique app user ID numbers, as well as details about users' online activities, device models, operating systems, and refund requests.
Fowler attempted to notify SuperVPN about the exposed database by reaching out to the available email addresses associated with both the iOS and Android versions of the VPN app. However, the database was abruptly closed without any explanation.
The timing of the incident raises additional concerns, as the SuperVPN app was trending on Twitter just last week when social media platforms were blocked in Pakistan. Fowler expressed worry over this sudden closure, hinting at possible connections between SuperVPN and recent events.
Furthermore, examining the ownership of SuperVPN adds another layer of apprehension. The app is listed under separate developers on the Google Play and Apple app stores, with references to several chinese companies. The lack of transparency raises concerns about the security of these free VPN services.
This is not the first time that SuperVPN has attracted attention from cybersecurity experts. In 2020, users were warned to delete the VPN due to the risks it posed to millions of VPN users. In 2016, Australian researchers identified SuperVPN as one of the most malware-rigged VPN apps available.
The recent breach of SuperVPN's user data underscores the importance of carefully selecting VPN providers and raises questions about the security and transparency of certain free VPN services. Users are advised to exercise caution and prioritize their privacy and security when choosing a VPN service.
