NZBGeek

NZBGeek, also known as UsenetGeek, is a Usenet indexing service that provides users with searchable NZB files to locate and download content from Usenet newsgroups. The organisation operates from its headquarters in New Zealand and is recognised by its two aliases within the Usenet community. Its core function is to index and categorise binary posts across various Usenet groups, enabling subscribers to efficiently retrieve media and other files. The service is accessed through a web interface where users can browse categories, perform keyword searches, and generate NZB files for download via compatible newsreaders. By focusing on indexing rather than hosting content, NZBGeek positions itself as a facilitator within the Usenet ecosystem rather than a content provider.

In November 2020, the service experienced a security breach in which attackers exploited an SQL vulnerability to inject a JavaScript‑based keylogger onto the website. This keylogger captured user‑entered data, including login credentials, email addresses, and credit‑card information submitted during checkout, despite the service’s claim that it does not store payment details directly. The incident resembled a Magecart‑style skimming attack, whereby payment data was intercepted in real time as users typed it into the site’s forms. Following the breach, NZBGeek advised affected individuals to monitor their financial accounts and to change any reused passwords to mitigate potential misuse of the stolen information. No further details about the organisation’s size, ownership structure, or subsidiary relationships are available in the provided sources.