Proxy shVPN provider admitted that they sniffed the traffic on one of its nodes located in the United States with unique intent to catch an alleged hacker. VPN providers security team installed Wireshark to track suspect traffic, but it was not necessary because the hackers apologized for the problems. The event raised once again the debate on privacy protection offered by VPN services, in reality many services track numerous connection parameters including IP address addresses, connection times and dates, others even analyze types of traffic routed through their networks.”]
Source: https://securityaffairs.co/wordpress/18251/digital-id/proxy-sh-can-trust-vpn-provider-maybe.html