Skip to main content

Seven VPN apps accused of exposing more than a terabyte of private data

A group of free VPN apps reportedly exposed a treasure trove of private data of millions of users. Discovered by vpnMentor, a total of seven VPN providers, all of which explicitly claimed they didn’t record their users’ activities, left more than a terabyte of browsing logs out in the open for anyone to access.

The leaked data silo housed a wide range of sensitive data, some of which was personally identifiable too. VpnMentor claims it included records of the websites users visited, plain-text passwords, PayPal payment information, device specifications, email addresses, and more.

While the data since then has been taken down, vpnMentor was independently able to confirm the data was channeled from these VPN apps by browsing through new accounts and cross-verifying it with the updated database.

In addition, all of the affected VPN apps are owned by the same Hong Kong-based parent company and were simply rebranded versions of the same VPN service. They were distributed under variations of generic names such as Super VPN, Fast VPN, Flash VPN, and more — a pattern commonly found in such data leak incidents. Most of them had more than 10 million downloads on the Google Play Store and iOS App Store and their listings haven’t been pulled yet.

We’ve reached out to Google and Apple for more information and we’ll update the story when we hear back.

“We do not track user activities outside of our Site, nor do we track the website browsing or connection activities of users who are using our Services,” one of them called UFO VPN boldly wrote in its privacy policy.

A spokesperson for UFO VPN argued that the database didn’t feature any personal information, and that the coronavirus prevented its staff from securing the server. The email addresses, they added, were of users who had sent them feedback and accounted for less than 1% of the entire data.

“Due to personnel changes caused by COVID-19, we‘ve not found bugs in server firewall rules immediately, which will lead to the potential risk of being hacked. And now it has been fixed,” the spokesperson told vpnMentor.

VPN apps are capable of monitoring your internet traffic and hence, it’s key to ensure the one you’ve installed has a secure infrastructure in place. If you were using any of these affected apps, here are a few alternatives.

Editors' Recommendations

Shubham Agarwal
Shubham Agarwal is a freelance technology journalist from Ahmedabad, India. His work has previously appeared in Firstpost…
How to set up a VPN
best VPN services

A virtual private network, or VPN, keeps others from tracking your movements online and makes your IP address untraceable. In times such as these, it could be beneficial to use a VPN to protect your network and data. If a VPN is in your future, but you are unsure how to set one up, this is the guide for you. We will discuss how to set up and use your VPN on Windows and MacOS PCs.
Step 1: Sign up and install your chosen VPN
Whether you pick a firm favorite like NordVPN or our current top choice, Private Internet Access, you will need to install the VPN client. Most top VPNs offer apps for Windows, MacOS, Linux, and both Android and iOS mobile devices, so download the program from either your respective app store or the official website and install it as usual.

You'll need to sign up for the service to get an official account, but once concluded, take your login information and enter it into the software to access the VPN service.

Read more
Ring’s Neighbors app gets more transparent with latest update
amazon drops the price for ring video doorbell 2 and throws in an echo dot with 4

Ring's Neighbors app is a tremendous add-on for Ring product owners but is also available for free on any iOS or Android device. Built from the ground up, the Neighbors service allows users to receive and post safety information with one another, in addition to public safety agencies that serve those communities. Utilizing posted content from regular Neighbors users and law enforcement agencies, the app offers a massive peace-of-mind solution by keeping communities informed and connected -- although, the means by which law enforcement has used the service to solicit information from users has been a point of contention.

Up until now, police, fire, and other investigative public services have had the ability through Ring to request device owners to send recorded video to investigative units with a Neighbors function called Video Requests. During community investigations, device owners would receive private emails from law enforcement seeking surveillance footage from their Ring hardware -- a solicitation that Ring owners could choose to accept or ignore. By changing privacy settings, users could also completely opt out of Video Requests altogether.

Read more
Apple’s Mac Catalyst apps are more important than ever, and they still need work
Apple's Podcasts app on MacOS Big Sur

The Apple Silicon transition is incoming, and with it, a wealth of mobile apps that should automatically run on new Macs. That doesn't mean these apps will offer great experiences on day one, though.

One of the solutions is a project called Mac Catalyst, which is Apple's way of helping developers port iPad apps over to the Mac. But even Apple’s own Mac Catalyst apps have had a rocky start since the first ones launched in 2018 with MacOS Mojave. They improved in MacOS Catalina, but still left me unconvinced about the future of the platform.

Read more