Security News > 2021 > July > Hacked Data for 69K LimeVPN Users Up for Sale on Dark Web

Researchers added the attack also included public and private keys of LimeVPN users.

"The hacker informed us that they have the private keys of every user, which is a serious security issue as it means they can easily decrypt every LimeVPN user's traffic," the firm said in a posting.

A PrivacySharks spokesperson told Threatpost that LimeVPN confirmed that there has been a data incident, and that the hacker who stole the database also claimed responsibility for the site being down.

LimeVPN, like many other providers, advertises a log-less service, meaning that it doesn't track its users or keep personal data on them.

"It is not entirely clear from the data we were provided if LimeVPN is collecting usage or connection logs from their users," according to RestorePrivacy.

What LimeVPN Users Should Do. As with the recent LinkedIn data-scraping incident, the information allegedly contained in the collection could potentially be used to carry out a variety of social-engineering attacks, including mounting phishing efforts and more.

News URL

https://threatpost.com/hacked-data-limevpn-dark-web/167492/