NordVPN confirms it was hacked

Re:NordVPN confirms it was hacked by rasengan on Monday October 21, 2019 @11:40AM (#21313526)

I think that is pretty criminal already.

Basically:

1- Nord falsely blames its server provider.

2- Nord hides it from their users.

3- Nord claims all will be well with an “audit” (again, since they were already “audited”)

This is either criminal negligence, “security theater”, or both.

[ Parent | on HN ]

Re:NordVPN confirms it was hacked by metalliqaz on Monday October 21, 2019 @12:09PM (#21313906)

> Nord falsely blames its server provider.

I don't see anything in the article about those claims being false. Where did you get that?

[ Parent | on HN ]

Re:NordVPN confirms it was hacked by CorruptedArc on Monday October 21, 2019 @12:45PM (#21314363)

From the article: "“One of the data centers in Finland we are renting our servers from was accessed with no authorization,” said NordVPN spokesperson Laura Tyrell."

I believe that would be the section they're referencing.

[ Parent | on HN ]

Re:NordVPN confirms it was hacked by biddlesby on Monday October 21, 2019 @01:05PM (#21314622)

How does this quote demonstrate that the service provider was not at fault?

[ Parent | on HN ]

Re:NordVPN confirms it was hacked by rasengan on Monday October 21, 2019 @01:13PM (#21314705)

“We failed by contracting an unreliable server provider...”

They are casting blame on the provider. Providing remote access tools is not a fault. Failure by NordVPN to disable said access is the issue, yet they passed the blame on.

[ Parent | on HN ]

Re:NordVPN confirms it was hacked by metalliqaz on Monday October 21, 2019 @01:54PM (#21315190)

Okay that makes sense. I read differently, like they had fabricated the story about the service provider's management console.

[ Parent | on HN ]