[commoner]

NordVPN was mainly criticized for how they handled the disclosure. They didn't admit to the server breach until a whistleblower revealed it publicly a year later.

https://www.bloomberg.com/news/articles/2019-10-21/after-twi...

The utility of a VPN is mainly based on trust, and NordVPN's lack of transparency in that incident is a breach of trust.

[arcticfox]

> The breach was done by “exploiting a vulnerability of one of our server providers, which hadn’t been disclosed to us,” according to the company [NordVPN]’s statement.

Laying the blame on an undisclosed vulnerability is pretty ironic of them

[LatteLazy]

Yeah, that's shitty of them...