Major outage · Identified
Hosting | VMmanager and DCImanager control panels
Started 3 weeks ago, UTC. Affects DCImanager, VMmanager.
-
Identified
We continue working on restoring our Hosting management systems following the security incident. At this stage, we still have no evidence that customer data has been transferred outside Gcore's infrastructure. Several control panels have now been restored. While direct access to these panels remains unavailable to customers, limited server management operations are now possible with assistance from our Support team. Server management and new orders are now available again in the following locations, subject to resource availability: Virtual Private Servers (VPS) * São Paulo, Brazil * Tel Aviv, Israel * Ashburn, USA * Tokyo, Japan * Madrid, Spain (out of stock) * Paris, France * Miami, USA * Istanbul, Turkey * Milano, Italy * Amsterdam, Netherlands * Almaty, Kazakhstan * Johannesburg, South Africa * Kyiv, Ukraine * Mumbai, India * Frankfurt, Germany * Hong Kong, China * London, UK * Chicago, USA * New York, USA * Singapore * Luxembourg, Luxembourg * Budapest, Hungary * Dallas, United States * Baku, Azerbaijan * Los Angeles, United States * Lima, Peru * Santiago de Querétaro, Mexico * Sofia, Bulgaria * Sydney, Australia * Fortaleza, Brazil * Singapore (out of stock) * Warsaw, Poland * Seoul, South Korea * Bucharest, Romania * Atlanta, USA * Yerevan, Armenia (out of stock) * Argentina, Buenos Aires Dedicated Servers (DS): * São Paulo, Brazil * Tel Aviv, Israel * Singapore * Madrid, Spain * Johannesburg, South Africa * Paris, France * Kyiv, Ukraine * Luxembourg, Luxembourg * Tokyo, Japan * Istanbul, Turkey * Manassas, USA (dci5) * Chicago, USA (dci5) * Milano, Italy * Amsterdam, Netherlands (DC2) * Almaty, Kazakhstan * Sydney, Australia * Mumbai, India * Miami, USA * Frankfurt, Germany * Warsaw, Poland * London, UK * Hong Kong, China * Santa Clara, USA * Seoul, South Korea (dci5) Important: Direct customer access to the restored control panels remains restricted. If you need assistance managing an existing server, please contact our Support team. The range of available operations is currently limited and will be expanded as recovery progresses. We are continuing restoration efforts in the remaining locations and working to restore full functionality. We will continue sharing updates as more locations and services become available. Thank you for your patience and understanding.
Show more Show less
6 earlier updates
-
Identified
We continue working on restoring full functionality of our management panels and addressing the impact of the security incident. At this stage, we still have no evidence that Gcore customer data has been transferred outside our infrastructure, which we consider an encouraging sign. Server management and new orders are now available again in the following locations: Virtual Private Servers: São Paulo, Brazil Israel, Tel Aviv USA, Ashburn Japan, Tokyo Dedicated Servers: São Paulo, Brazil Israel, Tel Aviv Singapore Spain, Madrid South Africa, Johannesburg France, Paris Ukraine, Kyiv Luxembourg, Luxembourg Recovery efforts are ongoing for the remaining locations, which will become available gradually. If you have questions or urgent needs regarding specific locations, please contact our Support team. Your feedback will help us prioritize recovery efforts based on customer needs. We will continue sharing updates as we make progress. Thank you for your patience and understanding.
Show more Show less
-
Monitoring
We continue working on restoring full functionality of our management panels and addressing the impact of the security incident. At this stage, we still have no evidence that Gcore customer data has been transferred outside our infrastructure, which we consider an encouraging sign. Server management and new orders are now available again in the following locations: - Singapore - São Paulo - Tel Aviv - Ashburn Recovery efforts are ongoing for the remaining locations, which will become available gradually. If you have questions or urgent needs regarding specific locations, please contact our Support team. Your feedback will help us prioritize recovery efforts based on customer needs. We will continue sharing updates as we make progress. Thank you for your patience and understanding.
Show more Show less
-
Monitoring
We implemented a fix and are currently monitoring the result.
-
Identified
We continue working on restoring our services and addressing the impact of the security incident. At this stage, we have no evidence that customer data has ever been transferred outside Gcore's infrastructure. In parallel with recovery efforts, we are implementing additional security measures to prevent similar incidents in the future. Services and dedicated server sales will be restored gradually across locations. We expect to reopen dedicated server sales in the first locations today, October 23, with additional locations becoming available progressively over the next week. We will continue to provide updates as recovery progresses. Thank you for your patience and understanding.
Show more Show less
-
Identified
This incident affects Gcore Hosting only (VPS managed through the VMmanager). We have no indication that other Gcore products, including Cloud and CDN, are affected. The control panels were disabled after attackers exploited a vulnerability in third-party virtualization software supplied by our vendor. Compromise has been confirmed in some Hosting locations, while others show no signs of it. We have found no evidence that customer data was read or copied, but we cannot rule out this possibility in the affected locations. Furthermore, we have found no evidence that your Gcore account data or our billing and payment systems were compromised. Who was notified: We have emailed security notifications to Hosting customers with services in locations where unauthorized access to customer data cannot be ruled out. If you have not received such a notification, your services are not located in the affected locations. However, please first check your spam folder, the email address associated with your Gcore account, and notifications in your account. If you received the notification: Please rotate passwords, SSH keys, API keys, and other secrets stored on or used from your servers, as described in the notification. Service status: All existing servers continue to run normally. The control panels remain unavailable, and in some locations, restoration may take up to a week.
Show more Show less
-
Identified
All existing servers continue to run normally. The VMmanager and DCImanager control panels in Hosting in all locations have been temporarily disabled following the discovery of a security vulnerability in third-party software provided by our vendor. Impact: It is currently not possible to create, stop, pause, or manage virtual or dedicated servers via the control panels. What we have done: The affected systems have been isolated and additional protective measures applied to prevent further unauthorized access. We are working with the vendor to verify whether any customer services or data were affected. We will provide an update as soon as we have more information. We apologize for the inconvenience.
Show more Show less
