Surfshark says human error exposed an internal test server to the internet, allowing an unauthorized party to access engineering material. The VPN provider says customer data and production systems were not affected.