In July 2026, the Russian VPN service SplitVPN (previously known as NotVPN) suffered a data breach. The incident exposed millions of customer records, including 865k unique email addresses. Other impa...

SplitVPN (formerly NotVPN) exposed 865,336 users and 58 million connection logs despite its "no-logs" promise. See what was leaked and how to protect yourself.

SplitVPN, anciennement NotVPN, fait face à une fuite massive de données. Près de 58 millions de journaux de connexion auraient été exposés, une accusation fermement contestée par le VPN.

The 'no-logs' VPN that allegedly logged everything: what the SplitVPN leak actually shows On July 21, a vendor on the Altenen cybercrime forum put up an SQL archive weighing 17 gigabytes, said to have been lifted from the infrastructure of SplitVPN, a Russian service that previously operated as NotVPN. The listing promised 23.4 million user

A threat actor on the Altenen cybercrime forum distributed a 17 GB SQL database allegedly stolen from SplitVPN (formerly NotVPN), a Russian VPN service marketed as 'no-logs.' Research by MysteriumVPN revealed the database contained 58 million connection logs, contradicting the provider’s claims. The breach exposed user activity records despite the VPN’s advertised privacy policy. No specific date for the breach or database leak was provided. The incident highlights a failure in SplitVPN’s data handling practices, though no technical vulnerabilities or CVE IDs were mentioned.

While SplitVPN claims the allegations are fabricated, the incident exposes the limits of no-log VPNs

HaveIBeenPwned (https://haveibeenpwned.com/Breach/SplitVPN), publié le 1er août 2026. L'incident concerne SplitVPN, un service VPN russe anciennement connu sous le nom de NotVPN. En juillet 2026, SplitVPN a été victime d'une violation de données ayant exposé des millions d'enregistrements clients.

A significant data breach has hit SplitVPN, a Russian VPN provider formerly known as NotVPN, exposing the personal records of roughly 865,000 unique users.

Op 21 juli 2026 werd SplitVPN, een Russische VPN-provider die voorheen bekend stond als NotVPN, getroffen door een omvangrijk datalek. De omvang van het incident werd bevestigd toen een dataset met de gecompromitteerde gegevens op 1 augustus 2026 werd toegevoegd aan de database van Have I Been Pwned, waaruit bleek dat ongeveer 865.336 unieke gebruikers getroffen zijn. Het datalek betrof een SQL-database van 17 GB die verspreid werd op het cybercriminele forum Altenen. De database bevatte naar verluidt circa 23,4 miljoen gebruikersrecords, 13,6 miljoen apparaatrecords en 2,6 miljoen betalingsrecords. Naast e-mailadressen en IP-adressen, inclusief het land van verblijf, werden ook gedeeltelij...

In July 2026, the Russian VPN service SplitVPN (previously known as NotVPN) suffered a data breach. The incident exposed millions of customer records, including 865k unique email addresses. Other impacted data included IP addresses, the user's country, and partial payment card data (first 6 and last 4 digits plus expiry date).

In July 2026, the Russian VPN service SplitVPN (previously known as NotVPN) suffered a data breach. The incident exposed millions of customer records, including 865k unique email addresses. Other impa...