Surfshark VPN says hackers breached internal testing, proxy servers
Surfshark VPN disclosed that attackers accessed an internal test server and proxy servers after a configuration error left the system exposed to the public internet. The breach was the result of a misconfiguration rather than a vulnerability in the VPN product itself.
Why this matters: People use VPNs specifically because they do not trust their traffic to be exposed. A breach at a VPN provider — even one limited to test and proxy infrastructure — cuts against the whole value proposition. The cause here was a basic misconfiguration, not a sophisticated attack. That matters because it means this was preventable. If a company selling privacy tools leaves a server open to the internet by accident, you have a right to know what was on it and whether any data connected to your traffic passed through.
Who should care: Cybersecurity · Privacy officers · Administrators
This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.