Data breach

SplitVPN: a data breach

In July 2026, the Russian VPN service SplitVPN (previously known as NotVPN) suffered a data breach . The incident exposed millions of customer records, including 865k unique email addresses. Other impacted data included IP addresses, the user's country, and partial payment card data (first 6 and last 4 digits plus expiry date).

The record

Organisation
SplitVPN →
Identity
SplitVPNidentified by its domain in a verified breach record
Records affected
865,336 records
Data exposed
Device information, Email addresses, Geographic locations, IP addresses, Partial credit card data
Sector
Not recorded
Occurred
2026-07-21
Disclosed
2026-08-01
First recorded here
2026-09-09

Fastnexa security experts

Worried the same could happen to your company?

If you are a customer or supplier of SplitVPN, or work in the same industry, a Fastnexa security expert can tell you what this means for your data and test whether the same attack would work on you.

Book a 30-min callWhatsApp us

Think you’ve already been hit? Don’t wait on a form: call or WhatsApp +1 (732) 454 2616. We reply within 1 hour, 24/7. Emergency help →

Sources (1)

One source so far.

  1. Have I Been Pwned ↗First reported

    2026-08-01