Kaseya incident

Datto AV - Increase in PDF detection as PHISH/PDF

Ongoing since 06:50 PM UTC, affecting Datto AV.

investigating Oct 28, 2026, 06:50 PM UTC

We are aware of a problem where Datto AV is incorrectly flagging newly created .pdf files as PHISH/PDF, causing the files to be quarantined. The Kaseya R&D Team is currently investigating this issue. In the meantime our Support team has been supplied with a workaround and can assist you with implementing it. If you would like to have the workaround applied, please create a ticket with our Support team or contact them at 833-863-2237. To work around this issue: Adding exclusions for the affected folders and files. Then restoring the affected files. Subscribe to the Kaseya Status Page for up-to-date information at https://status.kaseya.com/

Started
Oct 28, 2026, 06:50 PM UTC
Resolved
Ongoing
Duration
● 1h 17m
Detected by Pingoru
Oct 28, 2026, 06:50 PM UTC

Affected components

Datto AV

Update timeline

  1. investigating Oct 28, 2026, 06:50 PM UTC

    We are aware of a problem where Datto AV is incorrectly flagging newly created .pdf files as PHISH/PDF, causing the files to be quarantined. The Kaseya R&D Team is currently investigating this issue. In the meantime our Support team has been supplied with a workaround and can assist you with implementing it. If you would like to have the workaround applied, please create a ticket with our Support team or contact them at 833-863-2237. To work around this issue: Adding exclusions for the affected folders and files. Then restoring the affected files. Subscribe to the Kaseya Status Page for up-to-date information at https://status.kaseya.com/

Your product runs on more than Kaseya

Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.

Add your stack →