ClearlyIP experienced a minor incident on May 31, 2026 affecting US Central and Fax Service and 1 more component, lasting 17h 51m. The incident has been resolved; the full update timeline is below.
Affected components
Update timeline
- investigating May 31, 2026, 06:03 PM UTC
Our US-Central datacenter is experiencing routing issues at this time. Intermittent problems are resulting from this.
- identified May 31, 2026, 06:22 PM UTC
Our upstream connectivity provider(s) are experiencing degraded network performance which is affecting ClearlyIP/14IP services. They are working diligently to resolve this issue.
- identified May 31, 2026, 07:48 PM UTC
Work continues by our upstream provider(s) to isolate and resolve the root connectivity issues.
- identified May 31, 2026, 09:31 PM UTC
Work continues by our upstream provider(s) to isolate and resolve an apparent DDoS attack affecting multiple customers at the US-Central facilities.
- monitoring Jun 01, 2026, 12:40 AM UTC
We are seeing recovery but are continuing to monitor the situation while our upstream provider(s) work towards a full resolution.
- identified Jun 01, 2026, 01:06 AM UTC
We are seeing degraded connectivity once again, affecting services in US-Central. We are awaiting updates and progress reports from our upstream provider(s).
- monitoring Jun 01, 2026, 01:57 AM UTC
We are once again seeing recovery and are continuing to monitor the situation. Our upstream provider(s) have confirmed positive progress towards resolution of this ongoing DDoS event.
- monitoring Jun 01, 2026, 03:35 AM UTC
Latest updates from our upstream provider(s) indicate a full restoration of all services and connectivity. We are confirming the same and continue to see clean network operation at this time. We will continue to monitor.
- resolved Jun 01, 2026, 11:54 AM UTC
Connectivity has remained stable.
- postmortem Jun 10, 2026, 08:52 PM UTC
**Summary / Impact** On the afternoon of May 31st, 2026, 14IP's network operations group began to observe connectivity issues with resources located at its US-Central \(MKE\) data center. The team began working with their counterparts at the data center facility to understand the nature of the problem. It was quickly determined that a distributed denial of service \(DDoS\) attack targeted upstream was affecting all tenants of the data center. Significant malicious traffic \(exceeding 450gbps\) was measured upstream during the peak of the attack which overwhelmed equipment as well as primary, secondary, and tertiary links. This traffic was mitigated through coordinated, escalating filtering with upstream transit providers, as well as internal engineering to stabilize routing. During the incident, connectivity to systems and services primarily located in this data center were impacted significantly for periods of time between approximately 2 PM ET and 9:30 PM ET. This included Clearly Cloud, ComXchange hosted, Xivea, Business Connect, EPlatform, and several other systems. \(US-East trunking services continued to operate during the US-Central incident.\) **Follow-Up** Several facility-level network and system improvements have been implemented following the incident which should reduce the risk of future occurrences. This includes the deployment of additional DDoS scrubbing capacity, improved granularity for detecting attacks, additional fiber capacity upstream, as well as core network enhancements. 14IP plans additional improvements to its systems and operations to improve platform resilience and flexibility when responding to future incidents.