And most of other data is related to our old orders (and they are not necessarily customers). The total no of live accounts on these nodes are less than 800. To further clarify, LimeVPN provided us with this statement: LimeVPN does not have 69,400 users and the hacker never claimed to have data on 69,400 users. This is just an activity log of customer interactions, which is common with customer support management systems.We also obtained this information from the hacker a few days ago, but were able to see that: Today, there are numerous reports circulating about 69,400+ LimeVPN customers, with this screenshot as “evidence”. In his hacker forum post, he claimed 10,000, and in encrypted messages to us, he claimed the number was closer to 12,000. In our original report, we noted that the hacker claimed to have credentials for around 10,000 LimeVPN accounts. – LimeVPN statement to RestorePrivacy J2. Our VPN node infra is secluded from our web app infra. Secondly, this is restricted to billing system alone and our VPN nodes are not impacted. We do not and have never stored or logged any payment information. The only information that is stored in whmcs (our billing system) is a customers name/email/address (if they provide one). The leak seems to have happened in that server. We had an old backup server which was intend to move our billing system into a new server which was not active past few months. Here’s is further clarification that LimeVPN sent us today: The hacker claimed to have hacked LimeVPN’s backup database only (not the live website or live VPN server nodes). When we first analyzed all available data on June 29th, we could identify usernames and passwords in cleartext, as well as transaction data (but no credit cards or sensitive billing information). LimeVPN has also posted an update on the situation here. Below are corrections to some of the false reports circulating online now, with exclusive statements obtained from LimeVPN today. We have been in contact with both the hacker and LimeVPN since the hack was first announced on a hacker forum and have only reported what we could verify. UPDATE July 2, 2021: Numerous false reports are circulating online about the LimeVPN hack, including the total customer size, financial data, and the live site being “hacked”.
0 kommentar(er)
