SplitVPN Data Breach Exposes 58 Million Connection Logs Despite No-Logs Claim

A threat actor on the Altenen cybercrime forum distributed a 17 GB SQL database allegedly stolen from SplitVPN (formerly NotVPN), a Russian VPN service marketed as 'no-logs.' Research by MysteriumVPN revealed the database contained 58 million connection logs, contradicting the provider’s claims. The breach exposed user activity records despite the VPN’s advertised privacy policy. No specific date for the breach or database leak was provided. The incident highlights a failure in SplitVPN’s data handling practices, though no technical vulnerabilities or CVE IDs were mentioned.