Kaseya incident

Datto RMM (Syrah)-- Datto RMM Agent Detected as Malware Post 15.1.0

Critical Resolved View vendor source →

Kaseya experienced a critical incident on July 31, 2026, lasting 3d 13h. The incident has been resolved; the full update timeline is below.

Started
Jul 31, 2026, 02:27 AM UTC
Resolved
Aug 03, 2026, 04:04 PM UTC
Duration
3d 13h
Detected by Pingoru
Jul 31, 2026, 02:27 AM UTC

Update timeline

  1. investigating Jul 31, 2026, 02:27 AM UTC

    Antimalware suites are flagging the Datto RMM Agent update from 15.1.0 as malicious and raising alerts causing Partner distress.

  2. investigating Jul 31, 2026, 04:25 PM UTC

    Our R&D team is continuing its investigation into this issue and is working closely with a third-party provider to assist in identifying the root cause and resolution.

  3. monitoring Jul 31, 2026, 06:43 PM UTC

    We have reached out and shared the necessary technical indicators with our third party contact and have received confirmation that corrective actions have been implemented on their side. Based on the information provided to us, the issue should no longer occur with the current version of the agent. We will continue to closely monitor the situation and provide additional updates if necessary. Thank you for your patience and understanding.

  4. resolved Aug 03, 2026, 04:04 PM UTC

    This incident has been resolved.