HostPapa incident
[Fixed] Security incident: HostPapa customer account information
Ongoing since 05:59 PM UTC.
Sat, 24 Oct 2026 13:59:30 -0400: We identified that an unauthorized party accessed a data system HostPapa uses for internal reporting, beginning on or around October 15, 2026. An unauthorized party had access to a list of HostPapa customer accounts that include names, company names, email addresses, phone numbers, city, country and account status. Based on our investigation so far, the customer information downloaded in bulk in this incident does not include account passwords or full payment card numbers. We've removed the access, secured the affected systems and are investigating with an independent forensic firm. We're emailing affected customers directly. Service status: Your HostPapa website, email, server, and associated services have not been impacted. What you should do now: Be cautious with unexpected emails, texts, calls or invoices about your HostPapa account. Don't click links in them; type https://hostpapa.com into your browser instead. Watch for suspicious messages: We'll never ask for your password, two-factor codes or full card number by email, text, chat or phone.
Update timeline
- monitoring Oct 24, 2026, 05:59 PM UTC
Sat, 24 Oct 2026 13:59:30 -0400: We identified that an unauthorized party accessed a data system HostPapa uses for internal reporting, beginning on or around October 15, 2026. An unauthorized party had access to a list of HostPapa customer accounts that include names, company names, email addresses, phone numbers, city, country and account status. Based on our investigation so far, the customer information downloaded in bulk in this incident does not include account passwords or full payment card numbers. We've removed the access, secured the affected systems and are investigating with an independent forensic firm. We're emailing affected customers directly. Service status: Your HostPapa website, email, server, and associated services have not been impacted. What you should do now: Be cautious with unexpected emails, texts, calls or invoices about your HostPapa account. Don't click links in them; type https://hostpapa.com into your browser instead. Watch for suspicious messages: We'll never ask for your password, two-factor codes or full card number by email, text, chat or phone.
Your product runs on more than HostPapa
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services