SplitVPN data breach: what leaked and what to do
SplitVPN (splitvpn.io) had a data breach on 2026-07-21 affecting 865,336 accounts.
!Personal data leaked
Added to the catalogue 1 Aug 2026.
What leaked
- Device information
- Email addresses
- Geographic locations
- IP addresses
- Partial credit card data
What happened
In July 2026, the Russian VPN service SplitVPN (previously known as NotVPN) suffered a data breach. The incident exposed millions of customer records, including 865k unique email addresses. Other impacted data included IP addresses, the user's country, and partial payment card data (first 6 and last 4 digits plus expiry date).
Description from Have I Been Pwned, in its words.
What to do
- Warn staff: emails, texts or calls quoting leaked details are not proof the sender is genuine.
- If card or bank details leaked, watch statements and tell the bank; if identity documents leaked, consider a credit ban or alert.
- Turn on two-factor sign-in on that service and on your email.
Common questions
What leaked in the SplitVPN breach?
Device information, Email addresses, Geographic locations, IP addresses, Partial credit card data
When did the SplitVPN breach happen?
The breach date is 2026-07-21; it was added to the public catalogue on 2026-08-01.
What should I do if my staff used this service?
Warn staff about emails, texts and calls quoting the leaked details, and watch for sign-in attempts on the services they use.
Was a staff address in this breach?
Check one address free, no storage. Breach Watch checks every staff address after each new breach.