Another week, another "we take your privacy seriously" email landing in your inbox at 2 a.m.
This time it's a popular free VPN service that just copped to a breach exposing millions of user records.
And by "exposing," I mean someone walked out the digital back door with names, emails, and payment info while the company was busy tweeting about how much it respects you.
Here's the part that makes you feel warm inside.
The breach reportedly happened months before anyone noticed.
The kind of timeline where you could've grown a respectable beard waiting for the disclosure email that just says "we regret to inform you" and links to a FAQ page written by an intern.
If you're thinking "whatever, I use a paid VPN," congratulations on your superior life choices.
But the free VPN economy is basically a giant data farm with a padlock icon.
So when the product is free, you're not the customer.
You're the inventory, and apparently the inventory just got shoplifted.
Security researchers are already pointing out the usual suspects: weak encryption, reused credentials, and an authentication system that apparently had the structural integrity of a paper towel in a hurricane.
The company says it's "enhanced security protocols," which is corporate for "we changed the password and hope nobody asks follow-up questions." What should you actually do?
If you've been rocking the same one since your MySpace days, that's not a password, that's a skeleton key for every scammer on the planet.
Second, check if your email shows up on a breach-tracking site.
Third, and this is the big one, consider whether you actually need that sketchy free VPN or if you're just using it to watch region-locked content you could probably live without.
The bigger takeaway nobody wants to hear: your data is only as safe as the laziest company holding it.
And most of these apps are held together with duct tape, venture capital, and vibes.
A breach isn't a rare catastrophe anymore.
It's a subscription service you never signed up for.
The real mystery isn't how this happened.
Final Thoughts
It's why we keep acting surprised when it does.