Breach Record

SplitVPN

DISCLOSED 2026-08-04 · UNKNOWN · 865,000 RECORDS EXPOSED

In July 2026, SplitVPN suffered a data breach exposing personal records of approximately 865,000 unique users. The incident raised concerns about the company's 'no-logs' claims, as the exposed data indicated more extensive retention than publicly stated. No details on the attack vector or threat actor were provided.

The record

What we know

Disclosed

2026-08-04

Sector

VPN/Privacy Services

Records exposed

865,000

Data classes exposed

personal records

ColdRecon assessment

Could a positive-security control have prevented this?

Verdict · unclear · opinion

Insufficient details about the attack mechanism to assess whether a positive-security model would have prevented it.

Our assessments are opinion, grounded in the cited public facts. Read them critically.

Sources

Cited reporting

↗ cybersecuritynews.com

This page is the permanent ColdRecon entry for the SplitVPN disclosure. It updates if new public reporting emerges. All tracked breaches →

SplitVPN just lived through this. Your next prospect doesn't have to.

ColdRecon turns every disclosed breach into a daily intelligence brief from the seller's seat — normalized to the factors that move a deal, written in the Handler's voice. Request clearance and the first lands tomorrow at 0600.

Request Clearance →