Earlier this week, virtual private network service provider NordVPN formally announced that one of its third-party data centers in Finland had been hacked back in March 2018. The confirmation arrived shortly after rumors began circulating online about the unauthorized intrusion, but more than a year after the actual incident itself.
Since personal data was not compromised during the hack, NordVPN was sparred the burden of having to comply with any one of a number of state breach notification laws dictating the timelines companies need to abide by for alerting impacted parties about a cyber intrusion.
