The Latest Data Breach Everyone Is Talking About: NordVPN

Well, another week brings another data breach (it feels that way at least).  This week news broke that NordVPN was the latest victim of a data breach.

NordVPN released an official response

Thankfully, it does not appear that any NordVPN customer data was compromised.  Here's a quick break-down of the issue:

• A data center in Finland, where NordVPN had a contract for server hosting, experienced a breach.  The breach involved a single server.
• The data center allowed remote management to remain enabled on the server long enough for an intruder to access the server.
• The intruder did not obtain customer information, but did steal a TLS key.
• NordVPN claims that the stolen key was already expired.
• After learning about the breach, NordVPN terminated their contract with the Finland data center.