Millions of free VPN user records leaked

VPN on laptop screen
(Image credit: Shutterstock)

Free Virtual Private Network (VPN) service provider Bean VPN, has leaked personally identifiable information on millions of its users, researchers have found. 

Cybersecurity researchers from Cybernews stumbled upon a database with more than 18GB of connection logs generated by the app.

The database, discovered by the researchers during a routine checkup using ElasticSearch, reportedly contained more than 25 million records, including details such as device IDs, Play Service IDs, IP addresses, connection stamps. 

Share your thoughts on Cybersecurity and get a free copy of the Hacker's Manual 2022end of this survey

Share your thoughts on Cybersecurity and get a free copy of the Hacker's Manual 2022. Help us find how businesses are preparing for the post-Covid world and the implications of these activities on their cybersecurity plans. Enter your email at the end of this survey to get the bookazine, worth $10.99/£10.99.

De-anonymizing people

All of these items, the researchers said, could be used to establish the users’ true identities:

"The information found in this database could be used to de-anonymize Bean VPN's users and find their approximate location using geo-IP databases. The Play Service ID could also be used to find out the user's email address that they are signed in to their device with," Cybernews security researcher, Aras Nazarovas, said.

The free VPN app, which is not available on Apple’s app repository, has more than 50,000 downloads on the Google Play Store - where it appears to have been pulled from.

However on its website, the company says it doesn’t keep user activity logs, “including no logging of browsing history, traffic destination, data content or DNS queries.” 

It also says it doesn’t collect IP addresses, outgoing VPN IP addresses, timestamps or the durations of sessions which, as Cybernews’ report suggests, is not true.

The best VPNs preserve one’s privacy when going online. By hiding the endpoint’s true IP address and location, the user can circumvent various censorships and geographical blockades. Ever since Russia invaded Ukraine, its government blocked its citizens from accessing western media outlets, which triggered an enormous spike in VPN downloads in the country. 

VPNs are also very popular in China, where people use it to bypass the Great Firewall of China.

Via: Cybernews

Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.

Read more
Cartoon Phishing
One of the largest data leaks ever sees info on 1.5 billion people leaked online
Data breach
Privacy of millions worldwide compromised as huge data location broker got hacked
Computer Hacked, System Error, Virus, Cyber attack, Malware Concept. Danger Symbol
China-linked cyberespionage group PlushDaemon used South Korean VPN service to inject malware
Data leak
This top security camera streaming app may have been putting thousands of users at risk
Outdoor photograph of a pair of hands holding a smartphone with navigator location points in the background
Millions of phone location records feared leaked as one of the biggest data leaks ever may be a whole lot worse
 laptop with warning symbol on desk
Experts predict malware may impact 39% of free Android VPNs by 2025 – but that's not the only worry
Latest in VPN Privacy & Security
A computer file surrounded by red laser beams
Cover your tracks: the risk of sending unencrypted files
Using an Amazon Fire Stick on a Smart TV
How to use a VPN with Fire Stick
Close up of PS5 DualSense controller leaning on a PS5
5 reasons your PS5 needs a VPN
Tor
What is Onion over VPN?
 In this photo illustration a Google Play logo seen displayed on a smartphone.
Why is there so much spyware hidden in the Play Store?
PrivadoVPN running on an iPhone during TechRadar's VPN tests
Why PrivadoVPN Free is still the best free VPN for streaming
Latest in News
A man getting angry with his laptop.
Windows 11 bug deletes Copilot from the OS – is this the first glitch ever some users will be happy to encounter?
Huawei Watch Fit 3
The Huawei Watch 3 is a decent Apple Watch alternative, and its successor could be close at hand
An image of the Samsung Galaxy S25 Ultra from a hands-on event
Samsung's latest software upgrade could mean Galaxy phones beat iPhones for gaming – but you can't get it yet
God of War 20th Anniversary Graphic.
Sony has unveiled some goodies to celebrate God of War’s 20th anniversary, but it's not the remaster I was hoping for
person at a computer
Many workers are overconfident at spotting phishing attacks
Apple iPhone 16 Plus Review
The iPhone 17 Air could have an affordable price, and better battery life than you might have expected