{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "Cyberattack wipes cloud data at Russian hosting provider Beget · updates",
  "home_page_url": "https://pwn.watch/i/beget-hosting-cloud-wipe-cyberattack-nov-2026",
  "feed_url": "https://pwn.watch/i/beget-hosting-cloud-wipe-cyberattack-nov-2026/feed.json",
  "description": "Attackers gained access to the management servers of Beget, one of Russia's largest hosting providers and domain registrars, on the night of Nov 1 to 2 2026 and ran malware that deleted data. Beget says all data in its VPS, S3 cloud storage and Kubernetes services was lost, along with binary VPS backups and CDN and IP settings; file-level VPS backups survived. Hundreds of websites were disrupted, and more than 1,000 servers must be inspected by hand before coming back. Beget says it found no sign that customer data was downloaded or modified, but urges customers to change passwords, access keys and other credentials stored on its servers.",
  "language": "en",
  "_pwn": {
    "slug": "beget-hosting-cloud-wipe-cyberattack-nov-2026",
    "severity": "high",
    "status": "live",
    "patchStatus": "partial",
    "rss": "https://pwn.watch/i/beget-hosting-cloud-wipe-cyberattack-nov-2026/feed.xml",
    "llms": "https://pwn.watch/i/beget-hosting-cloud-wipe-cyberattack-nov-2026/llms.txt",
    "json": "https://pwn.watch/i/beget-hosting-cloud-wipe-cyberattack-nov-2026.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/beget-hosting-cloud-wipe-cyberattack-nov-2026#2026-11-04-070691cd",
      "url": "https://pwn.watch/i/beget-hosting-cloud-wipe-cyberattack-nov-2026#2026-11-04-070691cd",
      "title": "Cyberattack wipes cloud data at Russian hosting provider Beget: The first websites on restored shared hosting servers come back online. Beget says full recovery will take considerable time because more than 1,000 servers must be inspected manually.",
      "content_text": "Cyberattack wipes cloud data at Russian hosting provider Beget: The first websites on restored shared hosting servers come back online. Beget says full recovery will take considerable time because more than 1,000 servers must be inspected manually.\n\nSource: https://therecord.media/russia-cyberattack-beget-cloud",
      "date_published": "2026-11-04T00:00:00.000Z",
      "external_url": "https://therecord.media/russia-cyberattack-beget-cloud",
      "tags": [
        "high"
      ]
    },
    {
      "id": "https://pwn.watch/i/beget-hosting-cloud-wipe-cyberattack-nov-2026#2026-11-03-619a2443",
      "url": "https://pwn.watch/i/beget-hosting-cloud-wipe-cyberattack-nov-2026#2026-11-03-619a2443",
      "title": "Cyberattack wipes cloud data at Russian hosting provider Beget: Beget says all data in its VPS, S3 and Kubernetes cloud was lost, along with CDN and IP settings, while file-level VPS backups were kept. It sees no attempts to download or modify customer data and tells customers to change passwords, access keys and other credentials.",
      "content_text": "Cyberattack wipes cloud data at Russian hosting provider Beget: Beget says all data in its VPS, S3 and Kubernetes cloud was lost, along with CDN and IP settings, while file-level VPS backups were kept. It sees no attempts to download or modify customer data and tells customers to change passwords, access keys and other credentials.\n\nSource: https://ria.ru/20261103/beget-2128982225.html",
      "date_published": "2026-11-03T00:00:00.000Z",
      "external_url": "https://ria.ru/20261103/beget-2128982225.html",
      "tags": [
        "high"
      ]
    },
    {
      "id": "https://pwn.watch/i/beget-hosting-cloud-wipe-cyberattack-nov-2026#2026-11-02-0696ccf7",
      "url": "https://pwn.watch/i/beget-hosting-cloud-wipe-cyberattack-nov-2026#2026-11-02-0696ccf7",
      "title": "Cyberattack wipes cloud data at Russian hosting provider Beget: Around 02:00 Moscow time attackers reach Beget's management servers and at 02:30 launch malware that deletes data. Beget detects the breach at 02:40 and disconnects all servers from the network at 02:55.",
      "content_text": "Cyberattack wipes cloud data at Russian hosting provider Beget: Around 02:00 Moscow time attackers reach Beget's management servers and at 02:30 launch malware that deletes data. Beget detects the breach at 02:40 and disconnects all servers from the network at 02:55.\n\nSource: https://beget.com/en/about",
      "date_published": "2026-11-02T00:00:00.000Z",
      "external_url": "https://beget.com/en/about",
      "tags": [
        "high"
      ]
    }
  ]
}