Any security incidents that put <a href="https://mullvad.net/help/no-logging-data-policy/">customer data</a> at risk will always be dealt with in the same way, regardless of the size or nature of the incident or how the information is acquired, such as from an audit or tip.</p> <p>Our actions will include</p> <ul> <li>pinpointing the actual issues and allocating the appropriate stakeholders</li> <li>fixing the problem (changing keys, updating software, closing down servers)</li> <li>ensuring that the solution is propagated throughout our entire production</li> <li><a href="https://mullvad.net/blog/2018/9/24/read-results-security-audit-mullvad-app/">disclosing detailed information</a> about the problem once it has been mitigated and everyone is deemed safe.</li>