ConfirmedData breach
SplitVPN: a data breach
In July 2026, the Russian VPN service SplitVPN (previously known as NotVPN) suffered a data breach . The incident exposed millions of customer records, including 865k unique email addresses. Other impacted data included IP addresses, the user's country, and partial payment card data (first 6 and last 4 digits plus expiry date).
The record
- Organisation
- SplitVPN →
- Identity
- SplitVPNidentified by its domain in a verified breach record
- Records affected
- 865,336 records
- Data exposed
- Device information, Email addresses, Geographic locations, IP addresses, Partial credit card data
- Sector
- Not recorded
- Occurred
- 2026-07-21
- Disclosed
- 2026-08-01
- First recorded here
- 2026-09-09
Sources (1)
One source so far.
- Have I Been Pwned ↗First reported
2026-08-01