Article

NordVPN has denied claims of a data breach after a cybercriminal alleged the theft of over 10 databases, including Salesforce API keys and Jira tokens, through a brute force attack. The company asserted that the data was fabricated for testing purposes and confirmed that the March 2018 incident was linked to misconfigured remote management tools, with no user logs or VPN traffic compromised. This follows previous breaches involving NordVPN and raises concerns about potential phishing risks despite direct VPN credentials remaining secure.