[CorruptedArc]

From the article: "“One of the data centers in Finland we are renting our servers from was accessed with no authorization,” said NordVPN spokesperson Laura Tyrell."

I believe that would be the section they're referencing.

[biddlesby]

How does this quote demonstrate that the service provider was not at fault?

[rasengan]

“We failed by contracting an unreliable server provider...”

They are casting blame on the provider. Providing remote access tools is not a fault. Failure by NordVPN to disable said access is the issue, yet they passed the blame on.

[metalliqaz]

Okay that makes sense. I read differently, like they had fabricated the story about the service provider's management console.