Breach Disclosure: GPSUnderground

Breach Disclosure: GPS Underground

On or around summer 2016, vBulletin forum dedicated to GPS discussion, GPSUnderground, was breached. The forum allegedly ran vBulletin software that was susceptible to a number of vulnerabilities which caused it's breach. The breach specifically contained 670,000 rows of data with email addresses, usernames, dates of birth and salted md5 passwords.

Recommendations

• If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
• If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account
• Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks