
What to Ask After a VPN Vendor Breach: Surfshark 2026
Surfshark disclosed in September 2026 that an unauthorised party had reached an internal engineering test server left misconfigured and reachable from the internet. No user data and no VPN traffic were affected. Here is what the disclosure says, and the questions worth asking any VPN vendor after a breach.


