Liquid Web experienced a major incident on March 16, 2026 affecting CPanel, lasting 2d 20h. The incident has been resolved; the full update timeline is below.
Affected components
Update timeline
- investigating Mar 16, 2026, 05:22 PM UTC
We are currently investigating an issue affecting the ClamAV service, where clamd restarts may fail due to a problematic signature update. Our System Engineering team is actively working to identify the root cause and implement a fix. This issue may affect Maldet scans and cause mail delivery failures if the ClamAV service is not running.
- identified Mar 16, 2026, 06:07 PM UTC
We have identified the cause of the issue affecting the ClamAV service. A recent malware signature update introduced an invalid entry in the ClamAV signature database, which can prevent the clamd service from restarting successfully. Our team is currently applying a signature database refresh on affected servers to remove the invalid entry and restore normal operation of the ClamAV service. We are currently applying this fix across all affected servers and will provide another update once the process is completed.
- identified Mar 17, 2026, 06:06 AM UTC
We have automated the ClamAV signature database updates for all impacted servers. Deployment is currently underway, and we will provide another update once the process is completed. If you have any questions, please chat with us or create a support ticket via my.liquidweb.com. We appreciate your patience and understanding.
- identified Mar 18, 2026, 01:55 PM UTC
We have automated the ClamAV signature database updates for all impacted servers, and the deployment is currently still in progress. Based on the results so far, systems appear to have already received the updated signatures and are functioning as expected. We are continuing to monitor the automation to ensure completion across all hosts. We will provide a final update once the process has fully completed. If you have any questions, please chat with us or create a support ticket via my.liquidweb.com. We appreciate your patience and understanding.
- resolved Mar 19, 2026, 01:46 PM UTC
The ClamAV signature updates have been successfully applied, and systems are operating as expected. We will continue to monitor as part of normal operations. If you have any questions, please chat with us or create a support ticket via my.liquidweb.com. We appreciate your patience and understanding.