NordVPN has denied claims that its systems were hacked after a threat actor said they breached the company’s servers and stole source code. The VPN provider says no customer data was exposed and users are not at risk.
The claim appeared on a well-known dark web forum. A hacker using the name “1011” said they accessed a NordVPN Salesforce development server using brute-force attacks. The hacker shared screenshots and sample database files as proof, raising concerns among users.
NordVPN responded within 24 hours and launched an internal investigation. The company said it reviewed the leaked data and carried out a forensic analysis to verify the claim.
According to NordVPN, there is no evidence that its production servers or internal systems were compromised. A company spokesperson said there were no signs of unauthorized access to NordVPN infrastructure.
The investigation found that the hacked server did not belong to NordVPN. Instead, it was linked to a third-party platform that NordVPN briefly tested during a trial period. That test environment was never connected to NordVPN’s live systems.
Stay Safe Online With NordVPN’s Trusted VPN Services
Grab this limited-time offer and enjoy premium VPN protection at an unbeatable price!
NordVPN explained that the environment only contained dummy data. No real customer information, source code, or sensitive credentials were ever stored there. The trial was later abandoned, and another vendor was chosen.
The database tables shared by the hacker appear to come from this isolated test setup. NordVPN said these files were simply technical samples used to check basic functions.
NordVPN assured users that its security remains unchanged. “Your data is safe, and no action is required,” the company said. The provider stated that it continues to monitor the situation but believes the risk to users is zero.
