SOURCE-BACKED VPN COMPARISONSClear prices. Informed choices.
stealthvpn. Shortlist 0
← All investigations

OWNERSHIP & PEOPLE / 2021-09-14

ExpressVPN’s 2021 Daniel Gericke employment controversy

A documented employee relationship; earlier UAE hacking work

ExpressVPN

Company marks identify the subjects discussed, not a finding or endorsement. Image sources.

ExpressVPN

Provider statementCourt recordThird-party researchCommissioned assessmentCompany filingUnresolved

Labels identify the source, not a security rating or independent StealthVPN testing. Read the document scope and limits.

DOJ-hosted court agreement + company responseEvent / period: 2021-09-14 · Research reviewed: 2026-11-06

What the record says

Court record

Daniel Gericke is a signatory to a September 2021 US deferred prosecution agreement concerning hacking-related work for the UAE. The agreement acknowledges the truth of its attached factual statement and resolves charges subject to its terms.

Data outcome and relevance

Court record

This record concerns prior hacking work. It does not document an ExpressVPN customer-data disclosure.

Company response or subsequent action

Provider statement

ExpressVPN confirmed hiring him in December 2019, defended his defensive-security expertise, said it did not condone Project Raven and announced more frequent audits.

Unresolved / not established

What remains unestablished

A deferred prosecution agreement is not a conviction. This is a dated employment relationship, not a claim that he currently works there. Current employment and later procedural disposition were not established here. Neither his nationality nor previous work alone establishes access to VPN customer data.

Sources and document locators

A selected, dated case file. It does not replace reviewing the current service, policies and infrastructure. How we investigate