It doesn't sound like a particularly bad breach but they didn't disclose it very quickly, which never works in a company's favor. I use Nord VPN still. I tried Mullvad for a while and it was good, but I found Nord did a better job at getting around geoblocks, and was cheaper. I use Mullvad's browser with it though.