1
The few behind the many: hidden VPN owners unveiled VPN products that appear to be separate are all actually run by the same handful of companies. Even more, they're based in locations that aren't always privacy-friendly. Our research showed that at least 101 VPN products are run by just 23 parent companies. Hidden Claimed j2 Global (via StackPath) AnchorFree Gaditek Innovative Connecting Act Mobile Networks Edelino Commerce Inc SuperSoftTech Newbreed Network Hotspot VPN iElement B.V Super VPN & Free Proxy Hi Security Sarah Hawken KeepSolid Inc VeePN (veepn.com) Avast Kape Technologies ZPN Signal Lab Giga Studio FIFA VPN Hideman Ltd LEILEI USA j2 Global (via StackPath) AnchorFree Act Mobile Networks KeepSolid Inc VeePN (veepn.com) China Innovative Connecting Newbreed Network Hotspot VPN Hi Security SuperSoftTech Leilei Seychelles Edelino Commerce Inc Pakistan Gaditek UAE ZPN Czech Avast Netherlands iElement B.V UK Hideman Ltd Isle of Man Kape Technologies Hong Kong Signal Lab Unknown Giga Studio FIFA VPN Super VPN & Free Proxy Sarah Hawken China One of the most repressive, surveillance-hungry nations with strict data retention laws. Having a VPN based in or connected to this country means your data is probably in the government's hands. China is a world leader in cyber spying Sponsors cyber attacks on foreign officials Government can ask for encryption keys, data, etc. USA Founding member of the 5 Eyes alliance, the US is a major surveillance state. VPNs based in this country must comply with government requests for user data. NSA invests heavily in back door encryption FBI can access any data by secret subpoenas (NSLs) American Parent Companies: Pakistan Pakistan's 2016 cyber-crime law has been called "the worst piece of cyber-crime legislation in the world." Government can access any data without a warrant Data can be freely handed over to foreign institutions Pakistani Parent Company: Seychelles Seychelles is the kind of country where no VPN is actually based, but they are registered there for all its privacy-friendlvy laws and low taxes. This makes it a good place for a VPN to be registered. There are no mandatory data retention laws in Seychelles Seychelles Parent Company: Czech The Czech Republic is moderately safe when it comes to personal data protections. It is subject to the GDPR,which is enacted by all eurozone members, and has no mandatory data retention laws. Czech Parent Company: Netherlands The Netherlands is a moderately safe country when it comes to personal data protections. It is subject to the GDPR, which is enacted by all eurozone members, and has no mandatory data retention laws. Dutch Parent Company: Isle of Man Although not part of the EU, the Isle of Man has enacted data laws in line with the EU's GDPR. This makes it a good location to base a VPN. Isle of Man Parent Company: UAE United Arab Emirates is a moderately safe country when it comes to personal data protections. There are no mandatory data retention laws in the UAE. VPNs are banned for "criminal" usage, with heavy fines or jail time UAE Parent Company: Hong Kong Hong Kong is exempt from mainland China's laws and regulations. There are no mandatory data retention laws in Hong Kong. However, its proximity and relationship to mainland China is often worrying. Hong Kong Parent Company: UK One of the founding members of the 5 Eyes alliance, the UK is perhaps worse than the US for its surveillance laws since passing the Snooper's Charter. Having a VPN based in the UK is not optimal. British Parent Company: Gives law enforcement strong surveillance power without warrant Forces ISPs to keep user browsing records for 1 year Allows authorities to hack into computers or devices ? Unknown These VPN parent companies have no clear information about where they are based. It is very rare for VPN companies to not provide information about their company location. Since they could be based anywhere – including the UK, China, Russia, or worse – this is not optimal. Unknown Parent Companies: Location of Parent Company and/or Other Potential Owners Companies with Links to China: Presented by: If you believe we have made a factual error, please contact us so that we may investigate and either correct or confirm the facts. We can be contacted at [email protected].

aren't always privacy-friendly. Our research showed that at least … · 2019-12-03 · Pakistan's 2016 cyber-crime law has been called "the worst piece of cyber-crime legislation

  • Upload
    others

  • View
    1

  • Download
    0

Embed Size (px)

Citation preview

The few behind the many:hidden VPN owners unveiledVPN products that appear to be separate are all actually run bythe same handful of companies. Even more, they're based in locations thataren't always privacy-friendly. Our research showed that at least 101 VPNproducts are run by just 23 parent companies.

Hidden

Claimed

j2 Global (via StackPath)AnchorFreeGaditekInnovative ConnectingAct Mobile Networks Edelino Commerce IncSuperSoftTechNewbreed NetworkHotspot VPNiElement B.VSuper VPN & Free ProxyHi SecuritySarah HawkenKeepSolid IncVeePN (veepn.com)AvastKape TechnologiesZPNSignal LabGiga StudioFIFA VPNHideman LtdLEILEI

USAj2 Global (via StackPath)AnchorFreeAct Mobile NetworksKeepSolid IncVeePN (veepn.com)

ChinaInnovative ConnectingNewbreed NetworkHotspot VPNHi SecuritySuperSoftTechLeilei

SeychellesEdelino Commerce Inc

PakistanGaditek

UAEZPN

CzechAvast

NetherlandsiElement B.V

UKHideman Ltd

Isle of ManKape Technologies

Hong KongSignal Lab

Unknown

Giga Studio FIFA VPNSuper VPN & Free Proxy Sarah Hawken

ChinaOne of the most repressive, surveillance-hungry nationswith strict data retention laws. Having a VPN based in or connected to this country means your data is probably in the government's hands.

China is a world leader in cyber spyingSponsors cyber attacks on foreign officials Government can ask for encryption keys, data, etc.

USAFounding member of the 5 Eyes alliance, the US is a major surveillance state. VPNs based in this country mustcomply with government requests for user data.

NSA invests heavily in back door encryptionFBI can access any data by secret subpoenas (NSLs)

American Parent Companies:

PakistanPakistan's 2016 cyber-crime law has been called"the worst piece of cyber-crime legislation in the world."

Government can access any data without a warrantData can be freely handed over to foreign institutions

Pakistani Parent Company:

SeychellesSeychelles is the kind of country where no VPNis actually based, but they are registered there for allits privacy-friendlvy laws and low taxes. This makes ita good place for a VPN to be registered.

There are no mandatory data retention lawsin Seychelles

Seychelles Parent Company:

CzechThe Czech Republic is moderately safe whenit comes to personal data protections. It is subjectto the GDPR,which is enacted by all eurozone members,and has no mandatory data retention laws.

Czech Parent Company:

NetherlandsThe Netherlands is a moderately safe country when it comesto personal data protections. It is subject to the GDPR,which is enacted by all eurozone members,and has no mandatory data retention laws.

Dutch Parent Company:

Isle of ManAlthough not part of the EU, the Isle of Man has enacteddata laws in line with the EU's GDPR. This makesit a good location to base a VPN.

Isle of Man Parent Company:

UAEUnited Arab Emirates is a moderately safe country whenit comes to personal data protections. There areno mandatory data retention laws in the UAE.

VPNs are banned for "criminal" usage,with heavy fines or jail time

UAE Parent Company:

Hong KongHong Kong is exempt from mainland China's lawsand regulations. There are no mandatory data retentionlaws in Hong Kong. However, its proximity and relationshipto mainland China is often worrying.

Hong Kong Parent Company:

UKOne of the founding members of the 5 Eyes alliance,the UK is perhaps worse than the US for its surveillance lawssince passing the Snooper's Charter. Having a VPN basedin the UK is not optimal.

British Parent Company:

Gives law enforcement strong surveillance powerwithout warrantForces ISPs to keep user browsing records for 1 yearAllows authorities to hack into computers or devices

? UnknownThese VPN parent companies have no clear informationabout where they are based. It is very rare forVPN companies to not provide information about theircompany location. Since they could be based anywhere –including the UK, China, Russia, or worse – this is not optimal.

Unknown Parent Companies:

Location of Parent Company and/orOther Potential Owners

Companies with Links to China:

Presented by:

If you believe we have made a factual error, please contact us so that we may investigate andeither correct or confirm the facts. We can be contacted at [email protected].