We are contacting you today because we have learned of a data breach that occurred back in December 2014. The breach involved some of your personal information such as username, email and encrypted password. Although this happened in 2014, we only recently discovered this, and wanted to promptly provide notice as part of our commitment to your privacy.

The good news

To any VIPs, no payment information was included in the breach. All payment data is securely held by payment processors and never within our own servers.

Next, in January 2015, we moved from version 1 of our site to version 2. In doing so, we removed any access outsiders had to your information and accomplished three key things to strengthen our security:

We moved to a more secure algorithm for storing passwords
Our platform change removed the exploit
The new infrastructure has far tighter restrictions

What Happened

Our investigation is ongoing, but we believe a PHP exploit was used to capture data from Trakt users.
What information was involved

We have found that the information lost included email, username, encrypted passwords, name and location.

What we are doing

We have reset passwords for affected users. Although we believe that our 2015 move to version 2 of our site stopped any ongoing access to user information, we are diligently monitoring our site.

What you can do

For all affected users, we have reset your passwords and you will receive an email with a reset link. In addition to that, if you are the type of user to re-use passwords on different sites, we recommend changing your password on all other sites as well. Remember, this is a password from Dec. 2014, so if you have since changed your password, you are already protected.

Algo VPN is a set of Ansible scripts that simplify the setup of a personal IPSEC and Wireguard VPN. It uses the most secure defaults available, works with common cloud providers, and does not require client software on most devices. See our release announcement for more information.