It doesn’t sound like a particularly bad breach but they didn’t disclose it very quickly, which never works in a company’s favor. I use Nord VPN still. I tried Mullvad for a while and it was good, but I found Nord did a better job at getting around geoblocks, and was cheaper. I use Mullvad’s browser with it though.
Their reputation took a hit after a server breach in 2018.
https://www.theverge.com/2019/10/21/20925065/nordvpn-server-breach-vpn-traffic-exposed-encryption
It doesn’t sound like a particularly bad breach but they didn’t disclose it very quickly, which never works in a company’s favor. I use Nord VPN still. I tried Mullvad for a while and it was good, but I found Nord did a better job at getting around geoblocks, and was cheaper. I use Mullvad’s browser with it though.