SplitVPN Data Breach Exposes 865k Users’ Personal Records

A July 21, 2026 breach of SplitVPN (formerly NotVPN) resulted in a 17 GB SQL dump being circulated on a cybercrime forum and later verified by researchers; the dataset reportedly contains ~23.4 million user records, ~13.6 million device records, ~2.6 million (partially masked) payment records, and nearly 58 million connection logs that map devices/accounts to VPN servers and precise timestamps, contradicting the provider's "no-logs" claims and exposing roughly 865k unique email addresses—posing serious privacy and safety risks, particularly for users in countries with heavy internet censorship.