Is HostPapa down?

Sat, 24 Oct 2026 13:59:30 -0400: We identified that an unauthorized party accessed a data system HostPapa uses for internal reporting, beginning on or around October 15, 2026. An unauthorized party had access to a list of HostPapa customer accounts that include names, company names, email addresses, phone numbers, city, country and account status. Based on our investigation so far, the customer information downloaded in bulk in this incident does not include account passwords or full payment card numbers. We've removed the access, secured the affected systems and are investigating with an independent forensic firm. We're emailing affected customers directly. Service status: Your HostPapa website, email, server, and associated services have not been impacted. What you should do now: Be cautious with unexpected emails, texts, calls or invoices about your HostPapa account. Don't click links in them; type https://hostpapa.com into your browser instead. Watch for suspicious messages: We'll never ask for your password, two-factor codes or full card number by email, text, chat or phone.

Thu, 22 Oct 2026 02:18:56 -0400: HostPapa Managed infrastructure has been patched We have successfully applied updates across the fleet: Shared Hosting & Reseller Servers: 100% patched to secure PHP versions. Managed VPS / Dedicated Servers: Fully patched where our team had normal administrative access. Managed WordPress:  100% patched to secure PHP versions higher than 7.3 Due to the recently identified security vulnerabilities CVE-2026-109618 and CVE-2026-109619 affecting PHP web deployments, we have applied the necessary security updates to protect our managed infrastructure. More details in the following article: https://www.hostpapa.com/knowledgebase/php-critical-security-release-october-2026/

Thu, 22 Oct 2026 02:18:56 -0400: HostPapa Managed infrastructure has been patched We have successfully applied updates across the fleet: Shared Hosting & Reseller Servers: 100% patched to secure PHP versions. Managed VPS / Dedicated Servers: Fully patched where our team had normal administrative access. Managed WordPress:  100% patched to secure PHP versions higher than 7.3 Due to the recently identified security vulnerabilities CVE-2026-109618 and CVE-2026-109619 affecting PHP web deployments, we have applied the necessary security updates to protect our managed infrastructure. More details in the following article: https://www.hostpapa.com/knowledgebase/php-critical-security-release-october-2026/

HostPapa Managed infrastructure has been patched We have successfully applied updates across the fleet: - Shared Hosting & Reseller Servers: 100% patched to secure PHP versions. - Managed VPS / Dedicated Servers: Fully patched where our team had normal administrative access. - Managed WordPress:  100% patched to secure PHP versions higher than 7.3 Due to the recently identified security vulnerabilities CVE-2026-109618 and CVE-2026-109619 affecting PHP web deployments, we have applied the necessary security updates to protect our managed infrastructure. More details in the following article: https://www.hostpapa.com/knowledgebase/php-critical-security-release-october-2026/

We are currently performing emergency maintenance on sh-cp2-uk.yyz2. As a result, some or all services may be temporarily inaccessible. Our engineering team is actively working to restore services as quickly as possible. Updates will be posted here. We sincerely apologize for the inconvenience and appreciate your patience while we work to bring everything back online.

The emergency maintenance has been completed, and the issue affecting server has been resolved. Services on the server are now fully operational and accessible. We sincerely apologize for any inconvenience caused and appreciate your patience and understanding.