NewsPublished 11 Sep 2026

Surfshark Systems Targeted by Hackers

Source SecurityWeek

Description

Surfshark experienced a cybersecurity incident involving unauthorized access to a misconfigured internal test server containing engineering materials and internal configurations. The exposed server did not contain user data or production systems. Internal credentials found in code history were rotated, and no user data, VPN traffic, or browsing activity was compromised. The company contained the incident, removed exposure, and is conducting an independent security audit.

Impact

No user data, VPN service data, encryption keys, user identities, IP addresses, or browser traffic were exposed or compromised. The incident affected only internal engineering environments and isolated proxy servers, which do not handle production or user data. There was no impact on Surfshark's VPN services or user privacy.

Defensive guidance

Surfshark contained the affected system, removed the exposure, rotated the relevant internal credentials, and implemented additional security controls. An independent security audit is planned to assess the broader infrastructure security posture. No further user action is required as no user data or production systems were affected.

Summary

A misconfigured internal test server at Surfshark, accessible from the internet, was accessed by threat actors. The server contained limited internal engineering materials such as system binaries and internal configurations, as well as build-related credentials committed to code history. The credentials were rotated after discovery. An isolated proxy server was also accessed, but no sensitive user data, encryption keys, or VPN traffic were exposed. The affected system was separate from production environments and did not process or store user data. Surfshark contained the incident promptly and implemented additional security measures.

References

securityweek.com/surfshark-systems-targeted-by-hackers/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 11 Sep 2026, 09:47 UTC

References

Community reviews