Apparently, the researchers contacted some VPN providers before publishing. Perhaps Mullvad is among them.