Bonsai Elasticsearch incident

eMudhra Intermediate CA Compromise

Resolved after 20 hours 13 minutes, affecting One More Cloud service, on October 21, 2026.

resolved Oct 21, 2026, 09:25 PM UTC

We consider this issue closed. Please see our blog post for more details: https://bonsai.io/blog/emudhra-ca-compromise-customer-notice/

Started
Oct 21, 2026, 01:12 AM UTC
Resolved
Oct 21, 2026, 09:25 PM UTC
Duration
20h 13m
Detected by Pingoru
Oct 21, 2026, 01:12 AM UTC

Affected components

One More Cloud service

Update timeline

  1. investigating Oct 21, 2026, 01:13 AM UTC

    We are aware of the recently published findings of compromised intermediate CA certificates and we are working to evaluate any impact to Bonsai services. We will post updates here as we clear all of our hosted and managed services.

  2. investigating Oct 21, 2026, 01:51 AM UTC

    We have uncovered no critical customer impact as of this time and our investigation continues.

  3. investigating Oct 21, 2026, 02:21 AM UTC

    We have uncovered no critical customer impact as of this time and our investigation continues.

  4. monitoring Oct 21, 2026, 02:58 AM UTC

    After discovering no customer impact or direct route to exploit this situation, we are starting a series of remediations off the critical path for security hygiene. We are shifting this incident to monitoring and will update with any further findings.

  5. resolved Oct 21, 2026, 09:25 PM UTC

    We consider this issue closed. Please see our blog post for more details: https://bonsai.io/blog/emudhra-ca-compromise-customer-notice/

  6. resolved Oct 21, 2026, 09:25 PM UTC

    We consider this issue closed. Please see our blog post for more details: https://bonsai.io/blog/emudhra-ca-compromise-customer-notice/

Your product runs on more than Bonsai Elasticsearch

Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.

Add your stack →