Incident

Mullvad VPN claims that leaked accounts are not a data leak


Learn More

Mullvad VPN, a VPN service headquartered in Sweden has dismissed claims of a breach involving its users' accounts on the dark web. 

They are clarifying that the alleged breach was not a leak but rather accounts given away for free and subsequently found on public forums.

The breach claims surfaced when a French security researcher, posted findings suggesting a possible data breach related to web addresses tied to the Mullvad API. Mullvad's CEO, stated that the accounts supposedly breached were part of the VPN provider's regular donations to various organizations, sometimes finding their way into public forums.

The researcher had reported the alleged data leak to Mullvad, which promptly responded and addressed the issue. The leaked web addresses did not contain personally identifiable user data, including passwords.

Despite the allegations of a data leak Mullvad VPN remains widely recognized as a highly secure VPN provider, prioritizing user privacy and security.

Additionally, the Swedish police conducted a search at Mullvad VPN's premises, aiming to seize computers with customer data, although no customer data was compromised in the process.

Mullvad VPN claims that leaked accounts are not a data leak