Aside from handing user logs over to the FBI, HideMyAss has also been linked to the arrest of former US district judge Chris Dupuy.
Dupuy allegedly posted incriminating photos of two women he was formerly involved with. He tried to mask this behavior via a paid version of HideMyAss. But that tactic backfired. After the women started receiving mysterious phone calls, they immediately reported the matter to local authorities and put the finger of blame on Dupuy.
Law enforcement agencies worked backward to trace the source of this activity and pinpointed an IP address in Venezuela, Colombia. After more digging and clear cooperation with HideMyAss, they identified the culprit.
We don’t condone the behavior of Chris Dupuy but if a company vows to protect your privacy and keep it out of the reach of the government then it has a moral obligation to do so. Given HideMyAss’ poor track record, it’s unlikely that using this VPN will truly mask your behavior. Hence you should assume you’re at risk.