Loading
Loading
We use strictly necessary cookies to run this site, and analytics cookies to understand how it's used. See our Privacy Policy for details.
Breach occurred 2026-07-21Verifiedsplitvpn.io
What happened
In July 2026, the Russian VPN service SplitVPN (previously known as NotVPN) suffered a data breach. The incident exposed millions of customer records, including 865k unique email addresses. Other impacted data included IP addresses, the user's country, and partial payment card data (first 6 and last 4 digits plus expiry date).
Data exposed
Frequently asked questions
The SplitVPN data breach occurred on July 21, 2026. It was added to Have I Been Pwned's breach catalog on August 1, 2026.
865,336 accounts were affected by the SplitVPN data breach, according to Have I Been Pwned's records.
The SplitVPN breach exposed the following data types: Device information, Email addresses, Geographic locations, IP addresses, Partial credit card data.
Yes. Have I Been Pwned has verified the SplitVPN breach, meaning there's confirmed evidence the exposed data is genuine and tied to real accounts.
Use KazaSec's free Email Breach Checker (/tools/breach-check) to check whether a specific email address has surfaced in the SplitVPN breach, or any other known breach — the tool never stores what you search.
Our free Email Breach Checker tells you whether a specific email address has surfaced in this breach — or any other known breach — without ever storing what you search.
Check your email →Talk to us about this
We help organizations find and fix the gaps that lead to a breach, before they do.