SplitVPN

splitvpn.io

Trustworthiness

Verified by a specialist service

accounts: 865,336
Breach happened: 21 July 2026
Added to the register: 1 August 2026

In July 2026, the Russian VPN service SplitVPN (previously known as NotVPN) suffered a data breach. The incident exposed millions of customer records, including 865k unique email addresses. Other impacted data included IP addresses, the user's country, and partial payment card data (first 6 and last 4 digits plus expiry date).

What leaked

Card numbers

Enough to be used directly. Ask your bank for a new one.
Email address

The address every one of these scams will arrive at.

Phishing →
Rough location

Roughly where you are. Adds credibility, little else.
Device details

A technical fingerprint of your device. Little direct risk.

What is not listed

Passwords
Bank details
Identity documents

So there is no password to change here — the usual first move does not apply.

The record shows what was found in the data. Not listed is not the same as proven untouched.

Source

A specialist service holds the stolen data, checks it is genuine, and lets anyone search their own address in it. The strongest evidence short of an official source.

Verification service

Have I Been Pwned

Under licence CC BY 4.0

Collects leaked files, checks they are genuine, and lets anyone search their own address in them. Run by one security researcher since 2013.

See the source →