Skip to content
NordVPN Denies Breach Claims of Salesforce Server Leak

NordVPN Denies Breach Claims of Salesforce Server Leak

First seen 5 Jan 2026, 16:38 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

NordVPN has denied claims of a breach involving its internal Salesforce development servers. A threat actor known as '1011' alleged that they accessed sensitive data, but NordVPN stated that only 'dummy data' from a trial account was obtained through a brute-force attack on a third-party testing platform.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 197d ago How this analysis works

More articles in this cluster (11)

Following this threat?

Track Salesforce in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed