Russian hosting provider Beget hit by cyberattack that wiped data across its cloud infrastructure, including VPS, cloud storage and Kubernetes services; restoring all services will take considerable time, the company says
A cyberattack overnight on Sunday destroyed data across the cloud infrastructure of Beget, one of Russia's largest domain registrars and hosting companies, and disrupted hundreds of websites, The Record reported on 4 November 2026.
According to Beget's statement, as reported by The Record, the attackers gained access to systems used to manage the company's infrastructure and ran scripts designed to erase data; data associated with virtual private servers (VPS), cloud storage and Kubernetes services was wiped, and all binary backups of its virtual servers were lost, although file-level backups remained intact and could potentially be used to recover some information. "Restoring all services will take a considerable amount of time, as more than 1,000 servers must be manually inspected," the company said, as quoted by The Record.
Beget says nearly all websites on its shared hosting can likely be recovered and that dedicated servers managed directly by customers had already been restored; by Wednesday some websites were back online, according to The Record.
Beget said it found no evidence that the attackers tried to download or modify information on servers holding customer data, but urged customers to change passwords, access keys and other credentials that may have been stored on affected systems.
It has not disclosed how the attackers first got in, and no hacking group has publicly claimed responsibility, according to The Record. (source: The Record)
- Product
- Beget (Russian hosting provider and domain registrar): cloud VPS, cloud storage, Kubernetes and shared hosting
- Versions
- n/a — organisation security incident
- Exploited in Australia?
- unknown
- Patch to
- Beget customers: change passwords, access keys and other credentials that may have been stored on affected systems, as Beget advises, and check restored sites and data for integrity.
