GoKawiilSurfshark confirms breach of internal test and proxy servers, no user data affected
Surfshark disclosed that hackers gained access to an internal engineering test server after a misconfiguration left it exposed to the internet, along with a separate proxy server used for content-accessibility optimization. The company says the exposed systems contained build credentials, code history and system binaries, but no user identities, IP addresses, encryption keys or browsing traffic were compromised. Suspicious activity was spotted on August 31, contained by September 2, and remediation finished three days later.
GoKawiil's interpretation of the reporting above, not reported fact.
Even when customer data isn't touched, breaches of internal test environments show how configuration slip-ups can expose sensitive build infrastructure that attackers could later exploit to compromise production systems. For a privacy-focused VPN provider, transparency and rapid containment are essential to maintaining trust, since any hint of compromised infrastructure risks undermining its core promise of user anonymity and security.
- A misconfigured internal test server exposed build credentials and code history, not customer data.
- A separate proxy server for content optimization was also accessed but held no sensitive user information.
- Surfshark rotated credentials, revoked tokens, and added stronger security controls to test environments after the incident.
NordVPN Subscription Card — If this breach has you rethinking who guards your traffic, NordVPN is one of the most widely used alternatives and its subscription cards make setup simple across your phone, laptop, and router. You get encrypted connections on public Wi-Fi and apps for all the major platforms under one account.
See NordVPN Subscription Card on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: bleepingcomputer.com, 2026-09-10
Published there as: “Surfshark VPN says hackers breached internal testing, proxy servers”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.