March 5, 2018: Hacker gets root access and key material on a NordVPN server. 404 days after hack, NordVPN finally discovers server is compromised 594 days aft

March 5, 2018: Hacker gets root access and key material on a NordVPN server. 404 days after hack, NordVPN finally discovers server is compromised 594 days after hack, a twitter user boasts of experiments with NordVPN private key material that had "been floating around mostly unnoticed" 595 days after hack: NordVPN finally acknowledges they were breached. Apology hammers on two themes, "it's not our fault we had no way to restrict access to that server" and "you should still trust us because we confirmed this guy didn't do many of the awful things we allowed him the capability to do" That's a whole year of running a compromised server, and 27 whole weeks of cover-up between discovering the breach and getting called out on twitter.