Skip to main content

'Free speech' app Gab allegedly hacked, 70GB of data and millions of posts stolen

artistic representation of a hacker
(Image credit: Shutterstock)

A member of a popular whistle-blowing group has claimed to have broken into controversial social network Gab and extracted over 70 GB of user data.

In an interview, Emma Best, the founder of the Distributed Denial of Secrets (DDoSecretcs) group, shared that a hacktivist who self-identifies as "JaXpArO and My Little Anonymous Revival Project" claims to have exploited a SQL injection vulnerability in the alternative social network’s database to get their hands on the data.

"It contains pretty much everything on Gab, including user data and private posts, everything someone needs to run a nearly complete analysis on Gab users and content," Best told WIRED.

Selective distribution

According to Best, the hacked data contains the user’s public posts, private posts, user profiles, hashed user passwords, DMs, and plaintext passwords for groups. 

She says the group will not be publicly releasing the data due to its sensitive nature, but will instead share it with a select group of journalists, social scientists, and researchers. 

WIRED claims to have seen a sample of the data and reports that it appears to contain user’s private conversations as well.

Meanwhile, responding to reports about the breach, Gab’s CEO Andrew Torba has denied the incident. He further claims that much of the information that was reportedly attained through the hack, is already public. 

“We do not currently have independent confirmation that such a breach has actually taken place and are investigating,” wrote Torba, further assuring users that even if the database has been compromised the user passwords haven’t been revealed since they are encrypted.

Via: WIRED

Mayank Sharma

With almost two decades of writing and reporting on Linux, Mayank Sharma would like everyone to think he’s TechRadar Pro’s expert on the topic. Of course, he’s just as interested in other computing topics, particularly cybersecurity, cloud, containers, and coding.