Sensitive Information Disclosure on https://nordvpn.com/
None
N
Nord Security
Submitted None
Team Summary
Official summary from Nord Security
The researcher provided us with a URL where there was a list of NordVPN accounts posted. We want to assure that our service, our users' data is still secure – as far as our website and service are concerned. This is a global issue in cyberspace where hackers know that most users don't bother to set different passwords for different websites. That's why they automatically check their lists of account logins against tons of popular websites and services. More information on such behavior can be found on our website - https://nordvpn.com/blog/passwords-credential-stuffing/
Actions:
Reported by
011alsanosi
Report Details
Additional information and metadata
State
Closed
Substate
Informative
Submitted
Weakness
Information Disclosure