Massive Data Leak from SplitVPN Exposes Millions Despite 'No-Logs' Claims

A significant data breach involving SplitVPN has exposed approximately 58 million connection logs and millions of user records, contradicting the VPN's 'no logs' policy. The leaked database, distributed on the Altenen cybercrime forum, includes 23.4 million user records, 13.6 million device records, and 2.6 million payment records. Although full credit card numbers were not revealed, the data contains masked card numbers, expiration dates, and other sensitive information. The breach primarily affects users in regions like Russia, Iran, India, and Myanmar, where VPNs are used to bypass censorship. The incident raises concerns about the safety of users who relied on SplitVPN for privacy. The attack method involved unauthorized access to the VPN's database, revealing a significant gap in its security measures. Experts emphasize the need for users to be cautious and for companies to enhance their defenses against credential reuse attacks.

Key Points: • SplitVPN's data breach exposed 58 million connection logs, undermining its privacy claims. • The leaked data includes sensitive user information, affecting millions in censorship-heavy regions. • Cybercriminals exploited the VPN's vulnerabilities, highlighting the risks of using 'no logs' services.