DonorDrive experienced a notice incident on November 3, 2019 affecting Admin and Export API and 1 more component, lasting 1d 18h. The incident has been resolved; the full update timeline is below.
Affected components
Update timeline
- identified Nov 03, 2019, 03:40 AM UTC
It has been identified that DonorDrive has been the target of another DDoS attack. DonorDrive remains under DDoS mitigation service and we are taking steps to mitigate it as much as possible.
- identified Nov 03, 2019, 05:32 AM UTC
DonorDrive site accessibility has improved. However we still remain under active attack. We continue to operate under DDoS mitigation services. We will post another update at 3:30am EDT.
- identified Nov 03, 2019, 08:18 AM UTC
DonorDrive site accessibility continues to improve. We continue to operate under DDoS mitigation services. We will post another update at 5:30am EDT.
- monitoring Nov 03, 2019, 10:35 AM UTC
DonorDrive site accessibility continues to improve. We continue to operate under DDoS mitigation services. We will post another update at 7:00am EDT.
- monitoring Nov 03, 2019, 12:09 PM UTC
DonorDrive site accessibility has continued to stabilize. We remain operating under DDoS mitigation services. We will continue monitoring and providing updates.
- monitoring Nov 03, 2019, 05:02 PM UTC
DonorDrive sites remain accessible. We are continuing to monitor to ensure sites remain so. DDoS mitigation remains in place and we will continue to provide updates throughout the day.
- investigating Nov 03, 2019, 05:10 PM UTC
DonorDrive is continuing to be the target of a DDoS attack. Sites are showing intermittent accessibility and DDoS mitigation measures are being implemented. We will post an update as soon as we have one.
- monitoring Nov 03, 2019, 05:43 PM UTC
DonorDrive sites are accessible. We are continuing to monitor to ensure sites remain so. DDoS mitigation remains in place and we will continue to provide updates throughout the day.
- monitoring Nov 04, 2019, 12:26 AM UTC
DonorDrive sites are accessible. We are continuing to monitor to ensure sites remain so. DDoS mitigation remains in place and we will continue to provide updates once we have them.
- resolved Nov 04, 2019, 10:30 PM UTC
DonorDrive sites remain accessible. We will post a postmortem of the incident shortly. Please contact [email protected] with any questions.
- postmortem Nov 05, 2019, 03:44 PM UTC
DonorDrive sites experienced a period of increased distributed denial of service \(DDoS\) attacks beginning 10:10pm EDT on Friday, November 1st, and lasting until 12:36pm EST on Sunday, November 3rd. As a result of these attacks, DonorDrive was intermittently inaccessible during this time. We have no indication that any data was compromised. We fully appreciate how frustrating this was to our nonprofit clients and their communities. We use and continue to invest in advanced practices and technology to proactively address these attacks as they evolve. * We have implemented additional DDoS mitigation services. * We analyzed the specific areas that were being attacked, and areas of potential attack, across the platform and implemented proactive tactics to identify and mitigate this behavior. * We increased infrastructure capacity to remain operational during higher volume attacks.