TLDR InfoSec · MISCELLANEOUS
NORDVPN DENIES BREACH AFTER HACKER LEAKS DATA
Summary from the TLDR InfoSec newsletter
A threat actor claims to have brute-forced a misconfigured NordVPN server, allegedly leaking data, including Salesforce and Jira information, but NordVPN's forensic review found no compromise of its infrastructure. The threat actor attributed the leak to a third-party testing platform that used only dummy data without any real customer information, source code, or credentials.