Private Internet Access (PIA) has released its Q4 2025 transparency report, covering October–December 2025.

Private Internet Access (PIA) has released its Q4 2025 transparency report, covering October–December 2025.

Key points:
• 30 total legal requests (up from 19 in Q3)
• 7 subpoenas
• 1 warrant
• 10 government/civil requests
• 12 foreign/informal requests
• 0 user data disclosed

PIA states it was unable to provide any logs because it does not store user activity data. During the quarter, Deloitte Audit Romania conducted an independent ISAE 3000 (Revised) audit reviewing VPN servers, internal management systems, and token-based dedicated IP infrastructure — confirming alignment with stated no-logs policies.

The report also contextualizes broader security risks, including:
– Ongoing Oracle E-Business Suite breach consequences
– Leak of 324,000 BreachForums user records
– 91,000+ automated attacks targeting exposed AI proxy infrastructure
– Credential theft overtaking malware in many U.S. breach cases

Discussion prompts:
– Do third-party audits meaningfully validate “no-logs” claims?
– Should VPN transparency reporting be standardized industry-wide?
– Are legal request increases a trend we should expect globally?

Full report:
https://www.technadu.com/pia-transparency-report-q4-overview-info/620936/

Curious to hear perspectives from privacy engineers and threat analysts.