All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
NovaCloud-Hosting backup infrastructure breach – got the notice today, anyone else?
Just received an email from NovaCloud-Hosting about a security incident in their backup infrastructure.
Key points from the email:Their investigation found unauthorised access to specific files from backups of some customer VPS services.
One of my VPS (from last Halloween) is listed as affected: "Access to files from a backup of this VPS was identified."
They say the evidence does not establish that an entire VPS was copied.
They have blocked the access, replaced the relevant credentials and strengthened their security controls.
They advise replacing any passwords, API keys or other credentials stored in the affected files, and anywhere the same credentials were reused.
What the email *DO NOT say:
• Which files were accessed
• Which backup (date) they came from
• How the access happened, and when it started vs. when it was discovered
• Whether the backups were encrypted
• How many customers are affected
Do I need to change all credentials(include ssh secret) on this machine immediately as a precaution? Replacing all of them is quite cumbersome, and I am somewhat lazy.hhh. Has NovaCloud disclosed any additional details, such as a list of accessed files or backup timestamps?
I just logged in and noticed that I have not used any backup slots. Does this indicate that I am not significantly affected?
@NovaCloudHosting it would help a lot if affected customers could get the exact file list and backup timestamp, so we know what actually needs change.And what is the severity level of the vulnerability？
Comments
Yep I woke up to the same email. Created a ticket about which files were compromised. Hopefully nothing big