Bene IT incident

Wordpress Exploit

Critical Resolved View vendor source →

Bene IT experienced a critical incident on April 22, 2025 affecting Balance Nodes and Web Nodes and 1 more component, lasting 19h 52m. The incident has been resolved; the full update timeline is below.

Started
Apr 22, 2025, 02:05 AM UTC
Resolved
Apr 22, 2025, 09:58 PM UTC
Duration
19h 52m
Detected by Pingoru
Apr 22, 2025, 02:05 AM UTC

Affected components

Balance NodesWeb NodesWebsite Admin NodesStorage Nodes

Update timeline

  1. identified Apr 22, 2025, 02:05 AM UTC

    Strange files and redirects have been found in the logs. Currently I believe a compromised plugin caused this issue but still investigating. All sites are down while infected sites are contained.

  2. resolved Apr 22, 2025, 09:58 PM UTC

    The issue was caused by a plugin exploit and an update misconfiguration. Both issues have been resolved, and measures implemented to prevent it from happening again.