Your guide to a better future

  • Tech
  • Money
  • Home
  • Wellness
  • Cars
  • Culture
  • Science
  • News
  • Politics
  • Social Media
  • Privacy
  • Misinformation
  • Feature Stories
  • Tech
  • Home Entertainment
  • Mobile
  • Computing
  • Services & Software
  • Gaming
  • Money
  • Credit Cards
  • Mortgages
  • Insurance
  • Loans
  • Cryptocurrency
  • Banking
  • Investing
  • Taxes
  • Home
  • Home Internet
  • Home Security
  • Kitchen & Household
  • Smart Home
  • Energy & Utilities
  • Yard & Outdoors
  • Wellness
  • Sleep
  • Nutrition
  • Fitness
  • Personal Care
  • Parenting
  • Medical
  • Mental Health
  • Cars
  • Best Cars
  • Car Accessories
  • Car Reviews
  • Car News
  • Car Prices
  • Culture
  • Internet Culture
  • Entertainment
  • Sports
  • Fashion
  • Science
  • Climate
  • Space
  • Biology
  • Coupons
  • Doordash Promo Codes
  • eBay Coupons
  • ExpressVPN Coupons
  • HP Coupon Codes
  • Office Depot Coupons
  • Overstock Coupons
  • Samsung Promo Codes
  • Turbotax Coupons
  • Vistaprint Coupons
Services & Software

Popular VPN service NordVPN confirms data center breach

Hackers in 2018 accessed a lone server in Finland.

Oscar Gonzalez headshot
Rae Hodge headshot
Oscar Gonzalez
Rae Hodge
Oct. 22, 2019 12:57 p.m. PT
Oscar Gonzalez headshot

Oscar Gonzalez

Staff reporter

Oscar Gonzalez is Texas native who covers video games, conspiracy theories, misinformation and cryptocurrency.

See full bio
Rae Hodge headshot

Rae Hodge

Senior Editor

Rae Hodge is a senior editor at CNET, leading its coverage of privacy and cybersecurity tools. She's a data-driven investigative journalist on the software and services team, reviewing VPNs, password managers, antivirus software, anti-surveillance methods and ethics in tech. Prior to joining CNET in 2019, Rae spent nearly a decade covering politics and protests for the AP, NPR, the BBC and other local and international outlets.

See full bio
2 min read
Even virtual private networks can get hacked. 
James Martin/CNET

NordVPN, a popular virtual private network, said Monday it was the victim of a data breach in 2018. The company said that so far the impact from the hack was minor, but it plans on upping its security efforts. 

The VPN company released details on Monday of the March 2018 data breach, reported earlier by TechCrunch. An unauthorized user accessed a lone server in a Finland data center that NordVPN was renting from an unnamed provider, which apparently didn't disclose the hack. NordVPN says no username or passwords were intercepted. 

Techs at the company found an account of the data breach a few months ago, which led to a security audit. The VPN provider said it canceled its contract with the data center and verified that none of its servers could be accessed in a similar fashion. 

"We are taking all the necessary means to enhance our security. We have undergone an application security audit, are working on a second no-logs audit right now, and are preparing a bug bounty program," the company said in a press release Monday. "We will give our all to maximize the security of every aspect of our service, and next year we will launch an independent external audit ... of our infrastructure to make sure we did not miss anything else."

Tom Okman, a member of NordVPN's tech advisory board, told CNET that NordVPN is raising its standards for the data centers it contracts with. Okman said they agree better practices could have been applied.

"We are now doing an internal audit, so we're going to have bigger requirements for them, just to verify that this will not happen in the future," Okman said. 

Okman attributed the lengthy delay in confirming the leak to an intensive review of NordVPN's infrastructure. 

"We had to contact hundreds and hundreds of data centers all around the world, to audit and make sure there was no unverified account on any other server," he said. 

Read more: The best VPN services for 2019

First published Oct. 21.
Update, Oct. 22
: Adds comment from Tom Okman, a member of NordVPN's tech advisory board. 

  • More From CNET
  • Reviews
  • Best Products
  • Deals
  • Gift Guide
  • Shopping Extension
  • About
  • About CNET
  • Newsletter
  • Sitemap
  • Careers
  • Policies
  • Help Center
  • Terms of Use
  • Privacy Policy
  • Licensing
  • Cookie Settings
  • Do Not Sell My Information
© 2022 CNET, a Red Ventures company. All rights reserved.
US France Germany Japan Korea