Surfshark Confirms Unauthorized Access to Exposed Test Server

Summary

Surfshark says an exposed test server was accessed, exposing internal configurations, binary fragments and build-related credentials. The company reports no user data or production VPN systems were affected and says it revoked exposed secrets.

Key points

• Surfshark confirmed unauthorized access to a test server accidentally exposed to the public internet.
• The accessed environment contained internal service configurations, fragments of system binaries and credentials used in software builds.
• An isolated VPS used as a CDN proxy was also accessed; Surfshark says it had no access to user identities, IP addresses, cryptographic keys or browsing histories.
• Surfshark says its production VPN infrastructure, applications and browser extensions were unaffected, with no user data or network traffic accessed.
• The company detected suspicious activity on August 31, confirmed unauthorized access by September 2 and disconnected the server.
• Surfshark says it revoked or replaced exposed secrets, scanned affected servers for backdoors and completed primary restoration efforts by September 5.
• The company plans stronger access controls and credential management, more monitoring of test infrastructure, consistent security measures across test and production systems, and an independent infrastructure audit.

People

Vendors

Industries