At the beginning of 2017, the GPS Underground was among many compromised websites based on Vbulletin, which were sold on the Internet. The leak occurred in mid-2016 and included 670 thousand entries with user names, email addresses, IP addresses, birth dates and passwords in the form of haveh MD5 with salt.