Police boast of hacking VPN where criminals "believed themselves to be safe"