PCMag editors select and review products independently. If you buy through affiliate links, we may earn commissions, which help support our testing.

Your Data Is Already Out There. Can a VPN Do Anything About It?

Data breaches are on the rise. While a VPN can’t prevent such an attack, it can help you mitigate the risk. Here's how.

 & Justyn Newman Senior Writer, Security

Our team tests, rates, and reviews more than 1,500 products each year to help you make better buying decisions and get more from technology.

Our Expert
LOOK INSIDE PC LABS HOW WE TEST
65 EXPERTS
43 YEARS
41,500+ REVIEWS
(Credit: PCMag/Lily Yeh/Olemedia/Getty Images/Envato)

Data breaches happen all the time, but will likely become more prevalent with the push for age verification laws that require websites and third-party verification services to retain personal information. Even now, most sites are woefully inept at safeguarding sensitive data. A VPN is an excellent safety tool that can prevent advertisers and your internet service provider from spying on you, but it won’t save you from a breach. However, there are a few steps you can take to lower the risk. I go over how a VPN can assist in that task and cover what privacy steps you can implement to keep your data safe.

This article was made possible in part by Proton VPN. It was written and edited independently without partner oversight.


Can a VPN Save You From a Data Breach?

A VPN anonymizes your traffic through encryption and location spoofing. It will stop any observers, such as ISPs and advertisers, from gaining access to your browsing habits. So, it makes sense to think that it would shield your activity from sites that store data. In a sense, it does. Sites won’t retain your IP address, connection region, or be able to pin down your identity just from you browsing the web. 

That all changes when you make a purchase or fill out a form with your credentials. A VPN can’t anonymize data that you willingly provide. Once you hit submit on a payment or login, that information falls into the hands of the website to store or use as per its privacy policy. If it isn’t a privacy-minded company, then it likely stores, sells, or analyzes your data. This also goes for accessing streaming services like Netflix with a VPN. Sure, Netflix won’t know your real country of origin when you connect, but it will know your payment information, email, and any other personal details you have provided in the past.  

Said information can become the subject of a data breach regardless of how secure your connection is. In some cases, there isn’t much you can do to safeguard yourself while still using the site or service you need. Many require valid email addresses, credit cards, and identifying information simply to access your account. While complete prevention isn’t viable, there are steps you can take to limit your digital footprint.


How to Reduce the Risk of Having Your Data Leaked

You can have all of the privacy tools on the market, but none of them can replace caution. Read the privacy policy for sites that require your personal information. If you’re making a payment, then make sure you know what company processes it and what happens to your card information when the transaction is complete. The same goes for providing your email, name, address, or any other identifying information. If possible, it’s a good practice to monitor what is done with that data. Then you can make a judgment call on whether you trust that site, payment processor, or company. Be extra wary of sites asking for what appears to be frivolous personal data unrelated to the service being provided. 

If you don’t trust a site but still want or need to make a purchase, then you can sometimes get away with using a burner email, temporary phone number, fake name, and a one-time payment method. Just keep in mind that you could run into issues with support, account recovery, and renewal payments if you lose access to the temporary email or card. 

Password managers are another great line of defense against data breaches. Using a unique, strong password on every site will stop the domino effect that many data breaches have, where one breach results in your information on multiple sites being compromised.

Ad blockers and private browsers are also excellent privacy tools; however, like VPNs, they will only stop entities from tracking your online activity and won’t protect you against data breaches.

Finally, if you fall victim to a data breach, all hope is not lost. Read up on our tips about what you can do to limit its impact.

About Our Expert

Justyn Newman

Justyn Newman

Senior Writer, Security

My Experience

My writing journey started in 2012 and has taken me through various niches, but my main focus has always been on tech. I contributed to several growing PC hardware and software sites, focusing on gaming, peripherals, and privacy.

As the amount of information we put out on the internet has grown, so have the threats and the tools we use to combat them. With VPNs gaining traction in the late 2010s as a tool for the public instead of just an option for business security, I found myself reviewing countless options in this continuously changing landscape.

This led to my role before PCMag over at WizCase, where I honed my knowledge of VPNs and privacy tools and eventually oversaw all of the content produced. I led a talented team of fellow writers and editors to evaluate VPNs, password managers, antivirus, and parental controls.

The Technology I Use

I love small-form-factor PCs. My current ITX build uses an ASRock B650i motherboard, 32GB of RAM, a Ryzen 5 7600X, and an EVGA 3060 Ti, all nestled within the beautiful LZX-8 case by Lazer3D.

I have that connected to an MSI 34-inch ultrawide as my primary monitor. My second monitor is an older Acer 24-inch that only houses Discord and YouTube Music. Since I spend most of my time writing, I value a good keyboard. I use a Neo65 with Gazzew U4T Silent Bobas. My mouse is a Logitech MX Master 3S. For audio, I have a set of Edifier R1280Ts, or I’ll wear my trusty Sennheiser HD 6XXs. 

For work, I use a Lenovo P14s connected to everything mentioned above. If I'm taking personal work or studying on the go, I use a sticker-bombed Framework 13 powered by a Ryzen 5 7640U. Specifically for drafting fiction, I built a writing ‘cyberdeck’ that connects to my Neo 65 for a Raspbian-powered writing setup with minimal distractions. Regarding mobile devices, I’ve been on the Pixel train since the first one launched, and I am currently using a Pixel 9 Pro.

Outside of computing, I always carry a few key pieces of tech on my person. I have a Kindle Scribe that I use for note-taking and reading the latest speculative fiction. For music, I carry a Walkman NW-A55 with a pair of Rose Technics QuietSea IEMs. I do some light gaming on my re-shelled PSP 3000 running Infinity 2.0 CFW. When I'm not at the computer, you’ll usually find me lugging around my Pentax K1000 with a couple of rolls of Ektar 100 on standby.

Read full bio