[News](/news) Hacktivists target Gab.com [Blog](/blog)[Breaches](/breaches)[Resources](/resources)[News](/news) # Hacktivists target Gab.com ##### [Edward Kost](/team/edward-kost) February 28, 2021 Gab, the social media alternative attracting far-right users has been hacked. The salvaged data, known as ‘GabLeaks” consists of over 40 million posts, amounting to over 70 gigabytes of data. The data was breached by a hacktivist by the name of “JaXpArO.” The motivation behind the attack was to expose the alleged controversial content being permitted by the platform. The breached data included: * User data  * Private posts  * Private group posts  * Private individual messages * User passwords\ ‍ DDoSecrets, a non-profit devoted to the free transmission of data, announced that they had the breached data in a tweet by it’s journalist, Emma Best: > Anyway,\ > \ > Yes, we have the data.\ > \ > No, no one's working with the hackers like that.\ > \ > No, I won't say more right now.\ > \ > Yes, there'll be more info soon enough. [pic.twitter.com/Yh5sjBaEVr](https://t.co/Yh5sjBaEVr) > > — Emma Best 🏳️‍🌈🏴 Mx. Yzptlk (@NatSecGeek) [February 26, 2021](https://twitter.com/NatSecGeek/status/1365416337493868544?ref_src=twsrc%5Etfw) [Gab responded to this claim](https://news.gab.com/2021/02/26/alleged-data-breach-26-february-2021/) in a public announcement denying that a breach occurred “Today we received an inquiry from reporters about an alleged data breach. We have searched high and low for chatter on the breach on the Internet and can find nothing.” Gab said in its public statement. Emma Best revealed that the breach occurred through an SQL injection vulnerability on the Gab website. Such vulnerabilities integrate text field data with backend code, allowing hackers to access and manipulate backend SQL databases. Since the Capitol Hill riots in January 2021, hacktivists have been targeting right-winged social platforms. The Gab data breach, however, required a little more hacking acuity than the Parler cyber attack. Parler lacked very basic security measures that could have prevented its mass data scraping incident. Its most embarrassing vulnerability is known as an ‘insecure direct objective reference”.  The chronological order of every Parler post was reflected in its URL. By increasing the order number in the URL by 1, the next post could be loaded. Such rudimentary coding practices made Parler optimal for programmatic scraping. Gab’s exfiltrated data has not been published yet. Until (and if) this happens, Gab will continue to deny that a data breach occurred. “ We do not currently have independent confirmation that such a breach has actually taken place and are investigating. Much of this information (in particular Gab public posts and public user profiles) is already public.” ## How secure is Gab.com? Gab.com operates a social networking platform that emphasizes minimal content moderation policies. The service provides users with tools to post messages, images, and videos while positioning itself as an alternative to mainstream social media networks. * View our free preliminary report on Gab.com’s security posture * 13 risk factors, including email security, SSL, DNS health, open ports and common vulnerabilities [View Gab.com's score](/security-report/gab) [View score](/security-report/gab) [http://gab.com](/security-report/gab) ### Sign up for our newsletter UpGuard's monthly newsletter cuts through the noise and brings you what matters most: our breaking research, in-depth analysis of emerging threats, and actionable strategic insights. ## Latest news Stay up-to-date with the latest news in cybersecurity. [](/news/hugging-face-data-breach-2026-07-20) #### [Hugging Face data breach: key facts and what we know so far](/news/hugging-face-data-breach-2026-07-20) A data breach involving Hugging Face was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 20, 2026 [](/news/ey-data-breach-2026-07-19) #### [EY data breach: what happened and what's at risk](/news/ey-data-breach-2026-07-19) A data breach involving EY was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 15, 2026 [](/news/south-florida-injury-convenient-care-data-breach-2026-07-16) #### [South Florida Injury & Convenient Care data breach exposes names and Social Security numbers](/news/south-florida-injury-convenient-care-data-breach-2026-07-16) A data breach involving South Florida Injury & Convenient Care was reported in July 2026. See incident details, impact on customers, and security measures. ##### [UpGuard Team](/team/upguard) July 15, 2026 [](/news/park-west-psychology-data-breach-2026-07-16) #### [Park West Psychology data breach: what happened and what's at risk](/news/park-west-psychology-data-breach-2026-07-16) A data breach involving Park West Psychology was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 15, 2026 [](/news/fall-river-municipal-credit-union-data-breach-2026-07-16) #### [Fall River Municipal Credit Union data breach: what happened and what's at risk](/news/fall-river-municipal-credit-union-data-breach-2026-07-16) A data breach involving Fall River Municipal Credit Union was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [](#) July 14, 2026 [](/news/npcil-data-breach-2026-07-16) #### [NPCIL data breach: World Leaks claims exposure of Kudankulam Nuclear Power Plant files](/news/npcil-data-breach-2026-07-16) A data breach involving NPCIL was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 14, 2026 [View all news](/news) ## Protect your organization Get in touch or book a free demo. [Contact sales](/demo) [Free demo](/demo) ##### Free instant security score ## How secure is your organization? Request a free cybersecurity report to discover key risks on your website, email, network, and brand. * Instant insights you can act on immediately * Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities [Free score](/instant-security-score)