Datto incident

Datto RMM - Syrah, Vidal - 15.0.1 Cagservice.exe being flagged as malicious (Rapidstop) by Microsoft Defender for Endpoint

Major Ongoing View vendor source →

Datto is currently experiencing a major incident affecting Syrah (APAC) and Vidal (US East), which began 1d ago. The vendor's full update timeline is below.

Started
Jun 29, 2026, 04:02 PM UTC
Resolved
Ongoing
Duration
● 1d 9h
Detected by Pingoru
Jun 29, 2026, 04:02 PM UTC

Affected components

Syrah (APAC)Vidal (US East)

Update timeline

  1. investigating Jun 29, 2026, 04:02 PM UTC

    We are aware of a problem where Datto RMM's 15.0.1 Cagservice.exe is being flagged as malicious (Rapidstop) by Microsoft Defender for Endpoint. The Kaseya R&D Team are investigating this issue. Subscribe to the Kaseya Status Page for up-to-date information at https://status.kaseya.com/

  2. investigating Jun 29, 2026, 04:07 PM UTC

    We are continuing to investigate this issue.

  3. identified Jun 29, 2026, 07:36 PM UTC

    The issue has been identified and a fix is being implemented.

  4. monitoring Jun 29, 2026, 10:47 PM UTC

    A fix has been implemented and we are monitoring the results.