[News](/news) OpenWRT breached through admin account [Blog](/blog)[Breaches](/breaches)[Resources](/resources)[News](/news) # OpenWRT breached through admin account ##### [Edward Kost](/team/edward-kost) January 19, 2021 OpenWRT, an open source firmware solution for home routers, was breached exposing the email addresses of many of its forum users. The breach was [publicized in a forum post](https://archive.fo/e0YBQ) revealing that an admin account without [two-factor authentication](https://www.upguard.com/blog/two-factor-authentication) was the gateway to the sensitive data.  The breached exposed the email addresses, handles and other statistical information for a selection of forum members. While this breach may not have exposed [Personal Identifiable Information](https://www.upguard.com/blog/personally-identifiable-information-pii), if sensitivity is measured by compromise potential, the exposed data was highly sensitive. OpenWRT is an open source platform so a majority of its members are developers that are likely selling OpenWRT compatible software and routers to other companies. Since such a relationship requires access to sensitive company data, a compromised OpenWRT developer could lead to a [supply chain attack](https://www.upguard.com/blog/supply-chain-attack) impacting all of the developer’s clients. OpenWRT has urged all members to keep a vigilant eye on [potential phishing emails](https://www.upguard.com/blog/phishing) attempting to access the sensitive data of business partners. ## How secure is OpenWRT? OpenWRT is an open-source Linux operating system designed for embedded devices such as wireless routers and network equipment. The project provides a customizable firmware replacement that enables advanced networking features and extended hardware support beyond manufacturer defaults. * View our free preliminary report on OpenWRT’s security posture * 13 risk factors, including email security, SSL, DNS health, open ports and common vulnerabilities [View OpenWRT's score](/security-report/openwrt) [View score](/security-report/openwrt) [https://openwrt.org](/security-report/openwrt) ### Sign up for our newsletter UpGuard's monthly newsletter cuts through the noise and brings you what matters most: our breaking research, in-depth analysis of emerging threats, and actionable strategic insights. ## Latest news Stay up-to-date with the latest news in cybersecurity. [](/news/hugging-face-data-breach-2026-07-20) #### [Hugging Face data breach: key facts and what we know so far](/news/hugging-face-data-breach-2026-07-20) A data breach involving Hugging Face was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 20, 2026 [](/news/ey-data-breach-2026-07-19) #### [EY data breach: what happened and what's at risk](/news/ey-data-breach-2026-07-19) A data breach involving EY was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 15, 2026 [](/news/south-florida-injury-convenient-care-data-breach-2026-07-16) #### [South Florida Injury & Convenient Care data breach exposes names and Social Security numbers](/news/south-florida-injury-convenient-care-data-breach-2026-07-16) A data breach involving South Florida Injury & Convenient Care was reported in July 2026. See incident details, impact on customers, and security measures. ##### [UpGuard Team](/team/upguard) July 15, 2026 [](/news/park-west-psychology-data-breach-2026-07-16) #### [Park West Psychology data breach: what happened and what's at risk](/news/park-west-psychology-data-breach-2026-07-16) A data breach involving Park West Psychology was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 15, 2026 [](/news/fall-river-municipal-credit-union-data-breach-2026-07-16) #### [Fall River Municipal Credit Union data breach: what happened and what's at risk](/news/fall-river-municipal-credit-union-data-breach-2026-07-16) A data breach involving Fall River Municipal Credit Union was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [](#) July 14, 2026 [](/news/npcil-data-breach-2026-07-16) #### [NPCIL data breach: World Leaks claims exposure of Kudankulam Nuclear Power Plant files](/news/npcil-data-breach-2026-07-16) A data breach involving NPCIL was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 14, 2026 [View all news](/news) ## Protect your organization Get in touch or book a free demo. [Contact sales](/demo) [Free demo](/demo) ##### Free instant security score ## How secure is your organization? Request a free cybersecurity report to discover key risks on your website, email, network, and brand. * Instant insights you can act on immediately * Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities [Free score](/instant-security-score)