NordVPN confirms it was hacked

Re:NordVPN confirms it was hacked by rikkipitt on Monday October 21, 2019 @10:18AM (#21312516)

NordVPN just posted this a few minutes ago: https://nordvpn.com/blog/official-response-datacenter-breach...

[ Parent | on HN ]

Re:NordVPN confirms it was hacked by mzs on Monday October 21, 2019 @06:18PM (#21318126)

NordVPN is down, also looks like VikingVPN and TorGuard were affected as well: https://twitter.com/cryptostorm_is/status/118609795032747622...

[ Parent | on HN ]

Re:NordVPN confirms it was hacked by Matthias1 on Monday October 21, 2019 @06:40PM (#21318338)

The thing that scares me here is that these keys were leaked May 2018, and it's becoming public knowledge now.

Someone found certificates for those three VPN providers and posted them to 8chan with a message like "I don't recommend these VPN providers lol"

The good news is that they're only certificates, and they have now expired, but theoretically they could have been used for the past year without anyone noticing.

[ Parent | on HN ]

Re:NordVPN confirms it was hacked by wglb on Monday October 21, 2019 @09:45PM (#21319591)

During the spate of health care information leakage, someone invented a MTBCA, meaning "Meantime to CEO Apology" for the time between the breach and the CEO apology. At that time, it was running on the order of 8 months.

[ Parent | on HN ]

Re:NordVPN confirms it was hacked by carokann on Tuesday October 22, 2019 @03:31AM (#21321132)

Now that's a metric

[ Parent | on HN ]

Re:NordVPN confirms it was hacked by bloomburger on Tuesday October 22, 2019 @11:52AM (#21325093)

haha this is fantastic.

[ Parent | on HN ]

Re:NordVPN confirms it was hacked by jwilk on Monday October 21, 2019 @11:00AM (#21313033)

They wrote:

> We […] started creating a process to move all of our servers to RAM, which is to be completed next year.

What does "RAM" mean here?

[ Parent | on HN ]

Re:NordVPN confirms it was hacked by Faaak on Monday October 21, 2019 @11:11AM (#21313176)

I guess that all decryption keys are on ram. If the power is disconnected, then it would need a manual intervention to re-decrypt the data

[ Parent | on HN ]

Re:NordVPN confirms it was hacked by willstrafach on Monday October 21, 2019 @04:01PM (#21316612)

Likely booting the OS from a RAM-disk and mounting as read-only.

[ Parent | on HN ]

Re:NordVPN confirms it was hacked by haolez on Monday October 21, 2019 @10:43AM (#21312811)

I'm curious about who this cloud provider might be.

[ Parent | on HN ]

Re:NordVPN confirms it was hacked by spoopyskelly on Monday October 21, 2019 @03:28PM (#21316213)

The local IP for the OpenVPN endpoint (185.212.149.9 listed in the gist) belongs to creanova.org since 2017.

[ Parent | on HN ]