ShellCodeX Breach Report
SplitVPN Data Breach
splitvpn.io
Verified breach
Accounts exposed
865,336
Breach date
21 Jul 2026
Added to tracker
01 Aug 2026
Data classes
5
What happened
In July 2026, the Russian VPN service SplitVPN (previously known as NotVPN) suffered a data breach. The incident exposed millions of customer records, including 865k unique email addresses. Other impacted data included IP addresses, the user's country, and partial payment card data (first 6 and last 4 digits plus expiry date).
Exposed data
Device information
Email addresses
Geographic locations
IP addresses
Partial credit card data
Recommended actions
- Watch for targeted phishing emails referencing SplitVPN — attackers weaponise breach data quickly.
- Monitor your bank and card statements closely and consider requesting a card replacement.
- Check whether your email address appears in this breach on haveibeenpwned.com.
Am I affected?
Check whether your email address appears in this breach.
Check on HIBP