Surfshark VPN says hackers breached internal testing, proxy servers
Source Bleeping Computer
Description
Surfshark VPN experienced a security breach due to a misconfigured internal test server exposed to the internet. Hackers accessed this server and a separate proxy server used for content-accessibility optimization. The breach exposed service configurations, build-related credentials, system binaries, and code history, but did not affect production infrastructure or customer data. Surfshark confirmed no sensitive user information, VPN traffic, or encryption keys were compromised. The incident was detected on August 31, contained by September 2, and fully remediated shortly after. Surfshark rotated credentials, revoked tokens, and enhanced security controls and monitoring. Users are not required to take action but should remain vigilant for suspicious activity.