105
NordVPN denies breach claims, says attackers have "dummy data" (www.bleepingcomputer.com)
submitted 10 months ago by to c/technology@lemmy.world
27 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[+] -7 points 10 months ago (7 children)

Billing? ID -> balance. "Very" important data for hackers. They had more? Like card numbers, names, addresses, etc? That's a bad practice for VPN providers.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 7 child comments
    •
  • [–] 4 points 10 months ago (2 children)

    You are surprised that a for-profit company that bills people on a RECURRING basis for a paid service keeps card numbers and billing addresses/names? How would recurring bills be paid if the info isn't stored?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] -4 points 10 months ago (1 child)

    You are surprised

    I'm not surprised. I am accustomed to the shit around.

    How would recurring bills be paid if the info isn’t stored?

    Just go to the bank (or open your bank application on the phone) and pay.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 2 points 10 months ago*

    This is not how most people operate around subscription services. People expect that the online subscription service will manage that shit. Less secure I know, but you live either in the past or in a much higher risk environment than most.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 1 point 10 months ago* (3 children)

    How do they send you your invoice? Password resets?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 2 points 10 months ago

    Mulvad gives you a 16 digit random number when you sign up. Anyone with that number can use that account, it's on you to not lose it, if you do you have to make a new account. You send them money and an account number and they add balance to that account. When it's out, that account is blocked from service until they get more money. You hack their service and you get a list of numbers and whether or not they have service. They keep no documentation and if you pay with card you have to manually input every time. I know them better than they know their users.

  • permalink
  • fedilink
  • source
  • parent