diff --git a/website/server/controllers/api-v3/members.js b/website/server/controllers/api-v3/members.js
index 751c09da54..3496bde821 100644
--- a/website/server/controllers/api-v3/members.js
+++ b/website/server/controllers/api-v3/members.js
@@ -333,7 +333,7 @@ function _getMembersForItem (type) {
         const escapedSearch = escapeRegExp(req.query.search);
         query.$or = [
           { 'profile.name': { $regex: new RegExp(escapedSearch, 'i') } },
-          { 'auth.local.username': { $regex: new RegExp(req.query.search, 'i') } },
+          { 'auth.local.username': { $regex: new RegExp(escapedSearch, 'i') } },
         ];
       }
     } else if (type === 'group-invites') {