Back Securityaffairs.Co

VPN Breach Exposes 58 Million Connection Logs Despite “No-Logs” Claims

Securityaffairs.Co •Pierluigi Paganini • July 29, 2026

A breached “no-logs” VPN exposed 58 million connection logs and millions of user, device, and payment records, contradicting its privacy claims. A threat actor on the Altenen cybercrime forum is distributing a 17 GB SQL database claimed to have been stolen from SplitVPN, formerly known as NotVPN, a Russian VPN marketed for bypassing internet censorship. […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Massive Data Leak from SplitVPN Exposes Millions Despite 'No-Logs' Claims A significant data breach involving SplitVPN has exposed approximately 58 million connection logs and millions of user records, contradicting the VPN's 'no logs' policy. The leaked database, distributed on the Altenen cybercrime forum, includes 23.4 million user records, 13.6 million device records, and 2.6 million payment records. Although full credit card numbers were not revealed, the data contains masked card numbers, expiration dates, and other sensitive information. The breach primarily affects users in regions like Russia, Iran, India, and Myanmar, where VPNs are used to bypass censorship. The incident raises concerns about the safety of users who relied on SplitVPN for privacy. The attack method involved unauthorized access to the VPN's database, revealing a significant gap in its security measures. Experts emphasize the need for users to be cautious and for companies to enhance their defenses against credential reuse attacks. 5 sources 73

VPN Breach Exposes 58 Million Connection Logs Despite “No-Logs” Claims

The full story

Extracted Entities

Attack Types (1)

Companies (1)