This Russian VPN has been accused of breaching its no-log policy — here's what we know

Russian VPN SplitVPN has come under scrutiny after a data leak allegedly revealing a breach of its no-log policy. The VPN service, which is popular for bypassing censorship in countries with strict internet regulations, is accused of leaking 58 million connection logs and user data. However, SplitVPN denies any wrongdoing, claiming the leaked connection logs are fabricated and not part of its infrastructure.

The company asserts that its no-log policy only involves not collecting or sharing users' information like search queries, websites visited, and time spent on them. The incident highlights the challenges users face in verifying VPN providers' no-log claims, as these policies often rely on trust rather than verifiable safeguards.

While the leaked data primarily contains anonymized metadata, the authenticity of the deviceproxy table remains questionable. If the alleged logs are genuine, they could potentially expose users' identities and locations, putting millions of users at risk, especially in countries where VPN usage is heavily scrutinized or illegal.

Conversely, if the logs are fabricated, users are left with conflicting information to rely on, causing concerns among those living in restrictive environments. To maintain privacy, it is crucial for users to seek VPN providers with audited privacy policies and additional security features like kill switches, double VPN servers, and post-quantum encryption.

Ultimately, while a VPN's no-log policy is a valuable promise, the lack of verifiable safeguards can leave users vulnerable to potential breaches.