Re:NordVPN confirms it was hacked
by digitalengineer on Monday October 21, 2019 @11:28AM
(#21313382)
Within 72 hours According to GDPR I thought?
“ The GDPR introduces a duty on all organisations to report certain types of personal data breach to the relevant supervisory authority. You must do this within 72 hours of becoming aware of the breach, where feasible.”
https://ico.org.uk/for-organisations/guide-to-data-protectio...
[ Parent
| on HN ]
Maybe NordVPN would argue personal data wasn't breached?
It's a bad look in any case.
Theis Keys were stolen. All data is exposed now.
Only if someone used it successfully for MITM attacks. We don't know that, they can still argue that in fact no user data got breached.