logo

NordVPN Denies Breach After Hacker Claims Access to Salesforce Dev Data

ID: 1314742a-2fe3-599c-a5a8-8ad094a1437b

STIX ID: report--1314742a-2fe3-599c-a5a8-8ad094a1437b

Feed Name: HackRead

Threat Score
15/100

Date Published: 2026-01-05

Date Updated: 2026-04-22

Author: Waqas

...
...

A threat actor calling themselves '1011' posted alleged NordVPN Salesforce development data, claiming brute-force access and publishing database/configuration samples, API keys, Jira tokens, and source code; NordVPN responded that the materials came from a short-lived third‑party test sandbox with dummy data, denying any production systems or customer data were compromised and stating no action is needed by customers.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.