October 21, 2019
Per this TechCrunch article, NordVPN confirms it was hacked.
Here are some details from that article:
NordVPN told TechCrunch that one of its data centers was accessed in March 2018. “One of the data centers in Finland we are renting our servers from was accessed with no authorization,” said NordVPN spokesperson Laura Tyrell.
The attacker gained access to the server — which had been active for about a month — by exploiting an insecure remote management system left by the data center provider; NordVPN said it was unaware that such a system existed.
If you want an alternative VPN provider which is safer and easy to use, read more here.