Adeptcore Status
Real-time updates of Adeptcore issues and outages
Adeptcore status is Partially Degraded Service
Adeptcore Adeptcloud Infrastructure
ACP - Network
ACP - Storage
Adeptcore Third Party Service Advisories
You're checking on Adeptcore - but is your own site converting?
Outages aren't the only thing that costs you visitors.
Get a visual audit that shows exactly where your site loses conversions.
Free, takes 2 minutes.
Active Incidents
We are receiving reports of a widespread outage across our PHX Datacenter and its VM's. We are currently investigating this issue and interfacing with datacenter engineers to find the issue and get this resolved as quickly as possible. We will update this status as more information becomes available.
Monitoring: Service Recovery Update
Our team continues to work through the remaining recovery efforts related to the ransomware incident affecting a portion of our hosted environment.
The majority of customer systems have now been restored and returned to service. We are continuing to work directly with a small number of customers whose systems require additional recovery, validation, or rebuilding.
For those remaining environments, our engineers are reviewing all available backups, storage snapshots, virtual disk copies, and recovery sources. Each system is being handled individually to ensure that any restored data is complete, consistent, and safe to return to production.
Our security investigation and infrastructure review are also continuing in parallel with the recovery process. Based on the evidence reviewed to date, we have found no indication that customer data was copied or removed from the environment. We will continue to validate this conclusion as the investigation progresses.
We have completed several major remediation steps, including:
• Rebuilding affected management infrastructure • Resetting credentials and reviewing privileged access • Removing unauthorized access and associated tools • Restoring systems from clean recovery points where possible • Reviewing network, storage, virtualization, and security logs • Strengthening segmentation and access controls across the environment
Our immediate priority remains restoring the final affected systems and supporting the customers impacted by those remaining recovery cases.
We understand the disruption and concern this incident has caused. We are deeply sorry for the impact on our customers and partners, and we appreciate the patience and support we have received while our team continues this work.
We will provide another update as additional recovery milestones are completed and more information becomes available.
Monitoring: What Happened
An unauthorized third party gained access to an externally accessible system within our data center environment and deployed ransomware that affected a portion of our hosted virtual infrastructure.
Once the activity was identified, we contained the affected systems and immediately began our incident response and recovery process.
Our investigation into the exact method of initial access is still ongoing. While that investigation and the related remediation work continue, we are intentionally not publishing the specific technical entry point. This is necessary to protect the environment during recovery and to avoid stating a cause before it has been fully validated.
We are committed to providing a more detailed technical account once the investigation is complete and all required remediation has been implemented.
What This Means for Your Data
We understand that customers have two primary concerns: whether their data was accessed or stolen, and whether their systems and data can be recovered.
Data Exposure
As part of our investigation, we reviewed the network traffic leaving the affected environment during the incident.
Based on the volume of outbound traffic, the available connection throughput, and our review of the relevant network and security logs, we found no evidence that customer data was copied or exfiltrated from the environment.
Our investigation remains ongoing, and we will communicate directly with affected customers if any new information changes this assessment.
System and Data Recovery
The majority of affected systems have been, or are currently being, restored from clean backups and storage snapshots created before the incident. These systems are being returned to a known good state from before the ransomware activity occurred.
A small number of systems require additional recovery work. We are handling those systems individually and communicating directly with the affected customers and partners regarding their recovery status.
Actions We Have Taken
We responded immediately once the unauthorized activity was identified.
Contained the Affected Systems
Our first action was to take the impacted systems offline. This halted the active ransomware process and prevented further spread within the environment.
Reviewed System and Security Logs
We conducted an extensive review of system, network, storage, virtualization, and security logs to determine what occurred, how the activity progressed, and which systems were affected.
Removed Unauthorized Access
We removed the unauthorized party’s access to the environment and eliminated the tools, accounts, processes, and changes associated with the incident.
Initiated a Full Environment Restoration
Rather than attempting to clean and return the affected systems directly to service, we began rebuilding and restoring the environment from clean backups and storage snapshots that predated the incident.
This approach allows us to return systems to a known good state and reduces the risk of leaving behind unauthorized tools, changes, or persistence mechanisms.
Reset Credentials
We reset credentials across the affected environment and reviewed privileged access to infrastructure, management systems, storage, and virtualization platforms.
Reviewed Outbound Network Activity
We analyzed network activity associated with the incident to determine whether customer data left the environment. Based on the evidence reviewed to date, we have found no indication that customer data was exfiltrated.
Current Status
We continue to work directly with a small number of partners whose systems require additional restoration or recovery work. Our team is supporting those partners throughout the process and providing individual updates as new information becomes available.
Once the investigation, recovery, and remediation work are complete, we intend to publish a more detailed summary of the incident and the changes we have made to strengthen the security and resilience of our environment.
Identified: We have restored connectivity for the majority of our clients and virtual machines, and the environment continues to stabilize. Our teams remain actively engaged in resolving the remaining issues.
At this time, we are still seeing isolated pockets of network configuration issues affecting a subset of customer environments, along with a number of individual servers that require additional attention. As we work through the recovery process, we continue to encounter small, one-off issues affecting some virtual machines, and resolving these is taking time. Our teams are addressing them individually as they arise to bring each affected environment back online.
Once the current issues are resolved, we will be conducting a full review of all virtual machines both those previously running and those currently running from snapshots to identify and complete any remaining recovery actions still available to us.
We have also received requests from some clients for copies of their individual backups. Please be aware that we are not able to fulfill these requests at this time, as we are still actively working through the restoration process and completing our assessment of the environment. We appreciate your understanding and will provide guidance on this once recovery is further along.
We do not have a precise completion time for all remaining items, as this remains an active recovery effort, but our teams remain engaged continuously until every environment is fully restored.
We sincerely appreciate your continued patience as we work through the final stages of recovery. We will continue to provide updates as additional progress is made.
Investigating: We have restored connectivity for the majority of our clients and virtual machines. Our teams are continuing to trace and resolve the remaining network issues so that the rest of the affected environments can be brought back online.
We remain actively engaged in the restoration process and will continue to provide updates as additional progress is made.
Investigating: We are continuing to restore client systems, with additional customers being brought back online on an ongoing basis.
During the recovery process, we identified an issue affecting our virtual networking infrastructure that requires us to manually rebuild customer WAN configurations. Our teams have been working continuously throughout the weekend and will remain engaged through the night to restore connectivity for as many customers as possible before Monday morning.
We sincerely apologize for the continued disruption and delays. We appreciate your patience as we work to bring all remaining customer environments back online as quickly and safely as possible. We will continue to provide updates as restoration progresses.
Investigating: Customer environments operating behind our physical networking infrastructure have been brought back online.
We are continuing to repair and validate the virtual networking configurations. We anticipate completing the virtual networking restoration today, after which we can begin bringing the virtual machines connected to those networks back online in a controlled manner.
We appreciate your continued patience and will provide additional updates as restoration progresses.
Investigating: We are currently bringing customer environments back online in a controlled and measured manner. This process is proceeding as planned, but it will take time to complete as we carefully manage the workload to avoid overloading the storage arrays.
Our teams are actively monitoring the environment throughout the recovery process. We will continue to provide updates as additional customer environments are restored and progress is made.
Investigating: Hello Partners,
I want to provide a continued update regarding the outage affecting one of our data center environments and the progress of our recovery efforts.
Our teams have remained fully engaged throughout the recovery process. We have now restored approximately 120 TB of data from July 9 and approximately 30 TB of data from July 10. All restored volumes and data are currently showing as healthy through our validation processes, and we remain actively engaged in continued data validation to ensure integrity and stability across the environment.
In parallel with data restoration, we have begun network reconstruction efforts. Our networking team is actively rebuilding and verifying WAN configurations and related network settings to ensure a stable and secure environment as services are brought back online.
With confidence in the stability and security of the network and restored data, we have begun bringing client environments back online. Overnight, we initiated the restoration of customer virtual machines for testing and confirmation. To date, we have successfully brought up and verified approximately 150 customer virtual machines, confirming both operational functionality and data integrity.
Our teams have been working continuously through the night and will continue throughout the day to expand restoration efforts. Based on current progress, we expect customers to begin regaining access to their environments later today, continuing through the evening.
As part of our ongoing investigation, we have identified activity within portions of our underlying infrastructure that required us to take precautionary measures, including isolating systems and initiating recovery procedures. At this time, there is no indication that client data was accessed or removed from our environment, and our analysis confirms that no data exfiltration occurred. Our review of system logs and traffic patterns continues as we work to fully understand the scope and nature of the incident.
We understand the impact this outage has had on our partners and their customers, and we sincerely appreciate your continued patience as we work through the final stages of recovery. We will continue to provide updates as additional progress is made.
Denis Zhirovetskiy President AdeptCloud
Investigating: Our recovery efforts are continuing and will remain active throughout the night as data restoration progresses.
To support validation, we performed immediate volume recoveries into isolated environments. These recovered volumes have now been running for several hours with a limited number of isolated virtual machines powered on for testing. We have also cloned selected environments and data from test systems to further validate stability and integrity.
The next stages of recovery will include network configuration, auditing, and continued validation of restored volumes. Progress remains encouraging, with approximately 50 TB of data verified so far. We still have approximately 50–60 TB of data to move and are actively monitoring the restoration and validation processes as they continue.
Our teams remain fully engaged, and we will continue to provide updates as additional progress is made.
Investigating: Hello Partners,
I want to personally provide an update regarding the major outage affecting one of our data center environments. I also want to be as clear and transparent as possible about the situation and the recovery work currently underway.
Early this morning, we identified multiple servers that had lost network connectivity. We immediately engaged both the data center’s network engineering team and our internal network engineering team to begin investigating. Throughout the day, we have systematically isolated and tested the components of our network, storage infrastructure, and virtual environments.
During the investigation, we identified activity that required us to treat the situation as a potential security incident. Out of an abundance of caution, I made the decision to take the storage network offline and begin disaster recovery operations.
Our teams are currently moving more than 100 TB of data across multiple storage arrays and restoring systems from point-in-time snapshots. This is a significant recovery operation that requires careful validation at each stage to ensure the integrity and safety of the restored data.
We are currently testing backups from approximately 10:00 a.m. Central Time today, July 10, 2026, as well as backups from approximately 10:00 a.m. Central Time yesterday, July 9, 2026.
At this time, we have not confirmed whether a breach occurred. In parallel with the recovery effort, we are conducting extensive log reviews and analysis across our Phoenix clusters, networks, storage systems, and supporting infrastructure to determine the full scope and nature of the incident.
No one wants to begin their Friday with a service disruption of this magnitude. We understand the significant impact this outage has on our partners and their customers. We have a dedicated team working continuously on recovery operations, and I am personally involved in coordinating and overseeing this process.
Because of the volume of data involved, recovery and validation are taking time. Based on our current progress, we expect to begin bringing virtual machines and services back online overnight and into Saturday morning, July 11, 2026. This remains an estimate and may change based on the results of our data validation and security review.
Due to the widespread nature of the recovery effort, we cannot safely restore individual virtual machines one at a time or prioritize a single system independently. The storage, network, and virtualization layers are interconnected, and we must ensure the entire environment is restored in a controlled manner that protects data integrity and prevents further disruption.
We expect to provide additional updates every few hours as storage volumes are migrated, restored, tested, and validated.
AdeptCloud appreciates the patience and understanding of every partner affected by this incident. We sincerely apologize for the disruption and will continue to communicate openly as more information becomes available.
Denis Zhirovetskiy President AdeptCloud
Investigating: During our ongoing investigation, we identified indicators consistent with a potential compromise involving one of our dedicated storage servers. Upon identifying these indicators, we immediately isolated the affected management system and associated storage infrastructure to contain the issue and minimize any further potential impact.
The machine believed to be the source of the activity is now fully isolated and is being retained for further investigation. We have also reviewed other systems and, at this time, have not identified any additional indicators of compromise. However, the investigation remains ongoing, and we have not yet fully determined the scope or nature of the incident.
We are working closely with our datacenter partner to restore storage systems from previously validated snapshots. As part of this process, we are currently restoring a single datastore to validate the recovery procedure, confirm the integrity of the restored data, and help us better assess the impact before proceeding with additional storage systems.
Based on our investigation, we believe the networking symptoms observed earlier were related to activity originating from the affected management virtual machine. Our current focus is on safely restoring services while continuing to investigate the root cause and confirm the integrity of the affected environment.
We understand the impact this outage is having and appreciate your continued patience. We will provide additional updates as recovery progresses and more information becomes available.
Investigating: We continue to make progress on the storage recovery process. Early indicators remain encouraging, and the restoration and validation activities are progressing as expected.
To expedite resolution, we have dedicated one team to restoring storage services while a second team continues investigating the underlying cause of the incident. This parallel approach allows us to restore service as quickly as possible while ensuring the root cause is fully understood and addressed.
We remain committed to restoring services safely and as quickly as possible. We sincerely appreciate your continued patience and will provide additional updates as significant progress is made or within the next two hours, whichever comes first.
Investigating: We are currently working through the process of mounting and unmounting storage volumes as part of our recovery efforts. This is a time-intensive process, and we are carefully validating each step to ensure data integrity and a safe restoration of services.
We appreciate your continued patience while this work is underway. We will provide additional updates as significant progress is made or within the next two hours, whichever comes first.
Investigating: We have identified an issue affecting our storage arrays and are actively working to restore them to a previous snapshot as part of our investigation and recovery efforts. This process will help us further isolate the underlying issue and validate system integrity before restoring services.
We understand the significant impact this outage is having and sincerely appreciate your patience. At this time, we are unable to provide an estimated time for completion of the restoration and verification process. We will continue to share updates as additional information becomes available.
Investigating: We are continuing to work with the datacenter engineering team to resolve this incident. We understand the frustration caused by the extended disruption and sincerely appreciate your patience as our teams work through this issue.
Please know that we are doing everything we can to restore service as quickly and safely as possible. We remain actively engaged in the investigation and will continue to provide updates as new information becomes available.
Investigating: We continue to work alongside datacenter engineers to investigate the root cause of this incident. Our teams remain actively engaged in troubleshooting and evaluating all potential causes.
At this time, we do not have an estimated time for service restoration. We understand the impact this outage is having and appreciate your continued patience as we work to resolve the issue. We will provide another update as soon as additional information becomes available.
Investigating: We continue to actively investigate this issue in collaboration with the datacenter engineering team. At this time, we do not yet have an estimated time for service restoration.
Our teams remain engaged in identifying the root cause and implementing the appropriate remediation as quickly as possible. We understand the impact this outage is having and appreciate your continued patience. We will provide another update as soon as additional information becomes available.
Investigating: Our investigation has confirmed that both power and network connectivity within the datacenter are operating normally. We are now focusing on what appears to be a potential storage-related issue.
This is proving to be a complex incident, and we are continuing to work closely with datacenter engineers to isolate the root cause and restore service as quickly as possible. We understand the impact this is having and appreciate your patience. We will provide additional updates as soon as more information becomes available.
Investigating: A datacenter engineer is currently on-site at the affected rack, and we are actively investigating the issue together. We have confirmed access to our out-of-band management systems, which indicates external connectivity to our Cisco network infrastructure. However, traffic is not currently passing beyond that point into the environment.
Investigating: We are continuing to investigate the issue affecting our PHX datacenter. Preliminary indicators suggest the incident may be related to either networking and/or power infrastructure. Our engineering team is actively working alongside datacenter personnel to isolate the root cause and restore normal operations as quickly as possible.
Investigating: We are receiving reports of a widespread outage across our PHX Datacenter and its VM's. We are currently investigating this issue and interfacing with datacenter engineers to find the issue and get this resolved as quickly as possible. We will update this status as more information becomes available.
In response to a critical cPanel vulnerability (CVE-2026-41940) disclosed by the vendor, we are proactively patching all cPanel servers across our environment.
As a precaution while updates are rolling out, public access to the cPanel/WHM/Webmail management ports (2083, 2087, 2095, 2096) has been temporarily restricted. Your websites, email, and other services are not affected only the browser-based management interfaces. If you need access to cPanel or WHM during this window. Please submit a support request if you require access and we can setup a custom whitelist for you in the meantime.
We expect all servers to be patched and normal access restored within the next 48–72 hours. We'll send a follow-up once the work is complete. Thank you for your patience.
Monitoring: In response to a critical cPanel vulnerability (CVE-2026-41940) disclosed by the vendor, we are proactively patching all cPanel servers across our environment.
As a precaution while updates are rolling out, public access to the cPanel/WHM/Webmail management ports (2083, 2087, 2095, 2096) has been temporarily restricted. Your websites, email, and other services are not affected only the browser-based management interfaces. If you need access to cPanel or WHM during this window. Please submit a support request if you require access and we can setup a custom whitelist for you in the meantime.
We expect all servers to be patched and normal access restored within the next 48–72 hours. We'll send a follow-up once the work is complete. Thank you for your patience.
Recently Resolved Incidents
No recent incidents
Adeptcore Outage Survival Guide
Adeptcore Components
Adeptcore Adeptcloud Infrastructure
ACP - Network
We are receiving reports of a widespread outage across our PHX Datacenter and its VM's. We are currently investigating this issue and interfacing with datacenter engineers to find the issue and get this resolved as quickly as possible. We will update this status as more information becomes available.
Monitoring: Service Recovery Update
Our team continues to work through the remaining recovery efforts related to the ransomware incident affecting a portion of our hosted environment.
The majority of customer systems have now been restored and returned to service. We are continuing to work directly with a small number of customers whose systems require additional recovery, validation, or rebuilding.
For those remaining environments, our engineers are reviewing all available backups, storage snapshots, virtual disk copies, and recovery sources. Each system is being handled individually to ensure that any restored data is complete, consistent, and safe to return to production.
Our security investigation and infrastructure review are also continuing in parallel with the recovery process. Based on the evidence reviewed to date, we have found no indication that customer data was copied or removed from the environment. We will continue to validate this conclusion as the investigation progresses.
We have completed several major remediation steps, including:
• Rebuilding affected management infrastructure • Resetting credentials and reviewing privileged access • Removing unauthorized access and associated tools • Restoring systems from clean recovery points where possible • Reviewing network, storage, virtualization, and security logs • Strengthening segmentation and access controls across the environment
Our immediate priority remains restoring the final affected systems and supporting the customers impacted by those remaining recovery cases.
We understand the disruption and concern this incident has caused. We are deeply sorry for the impact on our customers and partners, and we appreciate the patience and support we have received while our team continues this work.
We will provide another update as additional recovery milestones are completed and more information becomes available.
Monitoring: What Happened
An unauthorized third party gained access to an externally accessible system within our data center environment and deployed ransomware that affected a portion of our hosted virtual infrastructure.
Once the activity was identified, we contained the affected systems and immediately began our incident response and recovery process.
Our investigation into the exact method of initial access is still ongoing. While that investigation and the related remediation work continue, we are intentionally not publishing the specific technical entry point. This is necessary to protect the environment during recovery and to avoid stating a cause before it has been fully validated.
We are committed to providing a more detailed technical account once the investigation is complete and all required remediation has been implemented.
What This Means for Your Data
We understand that customers have two primary concerns: whether their data was accessed or stolen, and whether their systems and data can be recovered.
Data Exposure
As part of our investigation, we reviewed the network traffic leaving the affected environment during the incident.
Based on the volume of outbound traffic, the available connection throughput, and our review of the relevant network and security logs, we found no evidence that customer data was copied or exfiltrated from the environment.
Our investigation remains ongoing, and we will communicate directly with affected customers if any new information changes this assessment.
System and Data Recovery
The majority of affected systems have been, or are currently being, restored from clean backups and storage snapshots created before the incident. These systems are being returned to a known good state from before the ransomware activity occurred.
A small number of systems require additional recovery work. We are handling those systems individually and communicating directly with the affected customers and partners regarding their recovery status.
Actions We Have Taken
We responded immediately once the unauthorized activity was identified.
Contained the Affected Systems
Our first action was to take the impacted systems offline. This halted the active ransomware process and prevented further spread within the environment.
Reviewed System and Security Logs
We conducted an extensive review of system, network, storage, virtualization, and security logs to determine what occurred, how the activity progressed, and which systems were affected.
Removed Unauthorized Access
We removed the unauthorized party’s access to the environment and eliminated the tools, accounts, processes, and changes associated with the incident.
Initiated a Full Environment Restoration
Rather than attempting to clean and return the affected systems directly to service, we began rebuilding and restoring the environment from clean backups and storage snapshots that predated the incident.
This approach allows us to return systems to a known good state and reduces the risk of leaving behind unauthorized tools, changes, or persistence mechanisms.
Reset Credentials
We reset credentials across the affected environment and reviewed privileged access to infrastructure, management systems, storage, and virtualization platforms.
Reviewed Outbound Network Activity
We analyzed network activity associated with the incident to determine whether customer data left the environment. Based on the evidence reviewed to date, we have found no indication that customer data was exfiltrated.
Current Status
We continue to work directly with a small number of partners whose systems require additional restoration or recovery work. Our team is supporting those partners throughout the process and providing individual updates as new information becomes available.
Once the investigation, recovery, and remediation work are complete, we intend to publish a more detailed summary of the incident and the changes we have made to strengthen the security and resilience of our environment.
Identified: We have restored connectivity for the majority of our clients and virtual machines, and the environment continues to stabilize. Our teams remain actively engaged in resolving the remaining issues.
At this time, we are still seeing isolated pockets of network configuration issues affecting a subset of customer environments, along with a number of individual servers that require additional attention. As we work through the recovery process, we continue to encounter small, one-off issues affecting some virtual machines, and resolving these is taking time. Our teams are addressing them individually as they arise to bring each affected environment back online.
Once the current issues are resolved, we will be conducting a full review of all virtual machines both those previously running and those currently running from snapshots to identify and complete any remaining recovery actions still available to us.
We have also received requests from some clients for copies of their individual backups. Please be aware that we are not able to fulfill these requests at this time, as we are still actively working through the restoration process and completing our assessment of the environment. We appreciate your understanding and will provide guidance on this once recovery is further along.
We do not have a precise completion time for all remaining items, as this remains an active recovery effort, but our teams remain engaged continuously until every environment is fully restored.
We sincerely appreciate your continued patience as we work through the final stages of recovery. We will continue to provide updates as additional progress is made.
Investigating: We have restored connectivity for the majority of our clients and virtual machines. Our teams are continuing to trace and resolve the remaining network issues so that the rest of the affected environments can be brought back online.
We remain actively engaged in the restoration process and will continue to provide updates as additional progress is made.
Investigating: We are continuing to restore client systems, with additional customers being brought back online on an ongoing basis.
During the recovery process, we identified an issue affecting our virtual networking infrastructure that requires us to manually rebuild customer WAN configurations. Our teams have been working continuously throughout the weekend and will remain engaged through the night to restore connectivity for as many customers as possible before Monday morning.
We sincerely apologize for the continued disruption and delays. We appreciate your patience as we work to bring all remaining customer environments back online as quickly and safely as possible. We will continue to provide updates as restoration progresses.
Investigating: Customer environments operating behind our physical networking infrastructure have been brought back online.
We are continuing to repair and validate the virtual networking configurations. We anticipate completing the virtual networking restoration today, after which we can begin bringing the virtual machines connected to those networks back online in a controlled manner.
We appreciate your continued patience and will provide additional updates as restoration progresses.
Investigating: We are currently bringing customer environments back online in a controlled and measured manner. This process is proceeding as planned, but it will take time to complete as we carefully manage the workload to avoid overloading the storage arrays.
Our teams are actively monitoring the environment throughout the recovery process. We will continue to provide updates as additional customer environments are restored and progress is made.
Investigating: Hello Partners,
I want to provide a continued update regarding the outage affecting one of our data center environments and the progress of our recovery efforts.
Our teams have remained fully engaged throughout the recovery process. We have now restored approximately 120 TB of data from July 9 and approximately 30 TB of data from July 10. All restored volumes and data are currently showing as healthy through our validation processes, and we remain actively engaged in continued data validation to ensure integrity and stability across the environment.
In parallel with data restoration, we have begun network reconstruction efforts. Our networking team is actively rebuilding and verifying WAN configurations and related network settings to ensure a stable and secure environment as services are brought back online.
With confidence in the stability and security of the network and restored data, we have begun bringing client environments back online. Overnight, we initiated the restoration of customer virtual machines for testing and confirmation. To date, we have successfully brought up and verified approximately 150 customer virtual machines, confirming both operational functionality and data integrity.
Our teams have been working continuously through the night and will continue throughout the day to expand restoration efforts. Based on current progress, we expect customers to begin regaining access to their environments later today, continuing through the evening.
As part of our ongoing investigation, we have identified activity within portions of our underlying infrastructure that required us to take precautionary measures, including isolating systems and initiating recovery procedures. At this time, there is no indication that client data was accessed or removed from our environment, and our analysis confirms that no data exfiltration occurred. Our review of system logs and traffic patterns continues as we work to fully understand the scope and nature of the incident.
We understand the impact this outage has had on our partners and their customers, and we sincerely appreciate your continued patience as we work through the final stages of recovery. We will continue to provide updates as additional progress is made.
Denis Zhirovetskiy President AdeptCloud
Investigating: Our recovery efforts are continuing and will remain active throughout the night as data restoration progresses.
To support validation, we performed immediate volume recoveries into isolated environments. These recovered volumes have now been running for several hours with a limited number of isolated virtual machines powered on for testing. We have also cloned selected environments and data from test systems to further validate stability and integrity.
The next stages of recovery will include network configuration, auditing, and continued validation of restored volumes. Progress remains encouraging, with approximately 50 TB of data verified so far. We still have approximately 50–60 TB of data to move and are actively monitoring the restoration and validation processes as they continue.
Our teams remain fully engaged, and we will continue to provide updates as additional progress is made.
Investigating: Hello Partners,
I want to personally provide an update regarding the major outage affecting one of our data center environments. I also want to be as clear and transparent as possible about the situation and the recovery work currently underway.
Early this morning, we identified multiple servers that had lost network connectivity. We immediately engaged both the data center’s network engineering team and our internal network engineering team to begin investigating. Throughout the day, we have systematically isolated and tested the components of our network, storage infrastructure, and virtual environments.
During the investigation, we identified activity that required us to treat the situation as a potential security incident. Out of an abundance of caution, I made the decision to take the storage network offline and begin disaster recovery operations.
Our teams are currently moving more than 100 TB of data across multiple storage arrays and restoring systems from point-in-time snapshots. This is a significant recovery operation that requires careful validation at each stage to ensure the integrity and safety of the restored data.
We are currently testing backups from approximately 10:00 a.m. Central Time today, July 10, 2026, as well as backups from approximately 10:00 a.m. Central Time yesterday, July 9, 2026.
At this time, we have not confirmed whether a breach occurred. In parallel with the recovery effort, we are conducting extensive log reviews and analysis across our Phoenix clusters, networks, storage systems, and supporting infrastructure to determine the full scope and nature of the incident.
No one wants to begin their Friday with a service disruption of this magnitude. We understand the significant impact this outage has on our partners and their customers. We have a dedicated team working continuously on recovery operations, and I am personally involved in coordinating and overseeing this process.
Because of the volume of data involved, recovery and validation are taking time. Based on our current progress, we expect to begin bringing virtual machines and services back online overnight and into Saturday morning, July 11, 2026. This remains an estimate and may change based on the results of our data validation and security review.
Due to the widespread nature of the recovery effort, we cannot safely restore individual virtual machines one at a time or prioritize a single system independently. The storage, network, and virtualization layers are interconnected, and we must ensure the entire environment is restored in a controlled manner that protects data integrity and prevents further disruption.
We expect to provide additional updates every few hours as storage volumes are migrated, restored, tested, and validated.
AdeptCloud appreciates the patience and understanding of every partner affected by this incident. We sincerely apologize for the disruption and will continue to communicate openly as more information becomes available.
Denis Zhirovetskiy President AdeptCloud
Investigating: During our ongoing investigation, we identified indicators consistent with a potential compromise involving one of our dedicated storage servers. Upon identifying these indicators, we immediately isolated the affected management system and associated storage infrastructure to contain the issue and minimize any further potential impact.
The machine believed to be the source of the activity is now fully isolated and is being retained for further investigation. We have also reviewed other systems and, at this time, have not identified any additional indicators of compromise. However, the investigation remains ongoing, and we have not yet fully determined the scope or nature of the incident.
We are working closely with our datacenter partner to restore storage systems from previously validated snapshots. As part of this process, we are currently restoring a single datastore to validate the recovery procedure, confirm the integrity of the restored data, and help us better assess the impact before proceeding with additional storage systems.
Based on our investigation, we believe the networking symptoms observed earlier were related to activity originating from the affected management virtual machine. Our current focus is on safely restoring services while continuing to investigate the root cause and confirm the integrity of the affected environment.
We understand the impact this outage is having and appreciate your continued patience. We will provide additional updates as recovery progresses and more information becomes available.
Investigating: We continue to make progress on the storage recovery process. Early indicators remain encouraging, and the restoration and validation activities are progressing as expected.
To expedite resolution, we have dedicated one team to restoring storage services while a second team continues investigating the underlying cause of the incident. This parallel approach allows us to restore service as quickly as possible while ensuring the root cause is fully understood and addressed.
We remain committed to restoring services safely and as quickly as possible. We sincerely appreciate your continued patience and will provide additional updates as significant progress is made or within the next two hours, whichever comes first.
Investigating: We are currently working through the process of mounting and unmounting storage volumes as part of our recovery efforts. This is a time-intensive process, and we are carefully validating each step to ensure data integrity and a safe restoration of services.
We appreciate your continued patience while this work is underway. We will provide additional updates as significant progress is made or within the next two hours, whichever comes first.
Investigating: We have identified an issue affecting our storage arrays and are actively working to restore them to a previous snapshot as part of our investigation and recovery efforts. This process will help us further isolate the underlying issue and validate system integrity before restoring services.
We understand the significant impact this outage is having and sincerely appreciate your patience. At this time, we are unable to provide an estimated time for completion of the restoration and verification process. We will continue to share updates as additional information becomes available.
Investigating: We are continuing to work with the datacenter engineering team to resolve this incident. We understand the frustration caused by the extended disruption and sincerely appreciate your patience as our teams work through this issue.
Please know that we are doing everything we can to restore service as quickly and safely as possible. We remain actively engaged in the investigation and will continue to provide updates as new information becomes available.
Investigating: We continue to work alongside datacenter engineers to investigate the root cause of this incident. Our teams remain actively engaged in troubleshooting and evaluating all potential causes.
At this time, we do not have an estimated time for service restoration. We understand the impact this outage is having and appreciate your continued patience as we work to resolve the issue. We will provide another update as soon as additional information becomes available.
Investigating: We continue to actively investigate this issue in collaboration with the datacenter engineering team. At this time, we do not yet have an estimated time for service restoration.
Our teams remain engaged in identifying the root cause and implementing the appropriate remediation as quickly as possible. We understand the impact this outage is having and appreciate your continued patience. We will provide another update as soon as additional information becomes available.
Investigating: Our investigation has confirmed that both power and network connectivity within the datacenter are operating normally. We are now focusing on what appears to be a potential storage-related issue.
This is proving to be a complex incident, and we are continuing to work closely with datacenter engineers to isolate the root cause and restore service as quickly as possible. We understand the impact this is having and appreciate your patience. We will provide additional updates as soon as more information becomes available.
Investigating: A datacenter engineer is currently on-site at the affected rack, and we are actively investigating the issue together. We have confirmed access to our out-of-band management systems, which indicates external connectivity to our Cisco network infrastructure. However, traffic is not currently passing beyond that point into the environment.
Investigating: We are continuing to investigate the issue affecting our PHX datacenter. Preliminary indicators suggest the incident may be related to either networking and/or power infrastructure. Our engineering team is actively working alongside datacenter personnel to isolate the root cause and restore normal operations as quickly as possible.
Investigating: We are receiving reports of a widespread outage across our PHX Datacenter and its VM's. We are currently investigating this issue and interfacing with datacenter engineers to find the issue and get this resolved as quickly as possible. We will update this status as more information becomes available.
ACP - Storage
We are receiving reports of a widespread outage across our PHX Datacenter and its VM's. We are currently investigating this issue and interfacing with datacenter engineers to find the issue and get this resolved as quickly as possible. We will update this status as more information becomes available.
Monitoring: Service Recovery Update
Our team continues to work through the remaining recovery efforts related to the ransomware incident affecting a portion of our hosted environment.
The majority of customer systems have now been restored and returned to service. We are continuing to work directly with a small number of customers whose systems require additional recovery, validation, or rebuilding.
For those remaining environments, our engineers are reviewing all available backups, storage snapshots, virtual disk copies, and recovery sources. Each system is being handled individually to ensure that any restored data is complete, consistent, and safe to return to production.
Our security investigation and infrastructure review are also continuing in parallel with the recovery process. Based on the evidence reviewed to date, we have found no indication that customer data was copied or removed from the environment. We will continue to validate this conclusion as the investigation progresses.
We have completed several major remediation steps, including:
• Rebuilding affected management infrastructure • Resetting credentials and reviewing privileged access • Removing unauthorized access and associated tools • Restoring systems from clean recovery points where possible • Reviewing network, storage, virtualization, and security logs • Strengthening segmentation and access controls across the environment
Our immediate priority remains restoring the final affected systems and supporting the customers impacted by those remaining recovery cases.
We understand the disruption and concern this incident has caused. We are deeply sorry for the impact on our customers and partners, and we appreciate the patience and support we have received while our team continues this work.
We will provide another update as additional recovery milestones are completed and more information becomes available.
Monitoring: What Happened
An unauthorized third party gained access to an externally accessible system within our data center environment and deployed ransomware that affected a portion of our hosted virtual infrastructure.
Once the activity was identified, we contained the affected systems and immediately began our incident response and recovery process.
Our investigation into the exact method of initial access is still ongoing. While that investigation and the related remediation work continue, we are intentionally not publishing the specific technical entry point. This is necessary to protect the environment during recovery and to avoid stating a cause before it has been fully validated.
We are committed to providing a more detailed technical account once the investigation is complete and all required remediation has been implemented.
What This Means for Your Data
We understand that customers have two primary concerns: whether their data was accessed or stolen, and whether their systems and data can be recovered.
Data Exposure
As part of our investigation, we reviewed the network traffic leaving the affected environment during the incident.
Based on the volume of outbound traffic, the available connection throughput, and our review of the relevant network and security logs, we found no evidence that customer data was copied or exfiltrated from the environment.
Our investigation remains ongoing, and we will communicate directly with affected customers if any new information changes this assessment.
System and Data Recovery
The majority of affected systems have been, or are currently being, restored from clean backups and storage snapshots created before the incident. These systems are being returned to a known good state from before the ransomware activity occurred.
A small number of systems require additional recovery work. We are handling those systems individually and communicating directly with the affected customers and partners regarding their recovery status.
Actions We Have Taken
We responded immediately once the unauthorized activity was identified.
Contained the Affected Systems
Our first action was to take the impacted systems offline. This halted the active ransomware process and prevented further spread within the environment.
Reviewed System and Security Logs
We conducted an extensive review of system, network, storage, virtualization, and security logs to determine what occurred, how the activity progressed, and which systems were affected.
Removed Unauthorized Access
We removed the unauthorized party’s access to the environment and eliminated the tools, accounts, processes, and changes associated with the incident.
Initiated a Full Environment Restoration
Rather than attempting to clean and return the affected systems directly to service, we began rebuilding and restoring the environment from clean backups and storage snapshots that predated the incident.
This approach allows us to return systems to a known good state and reduces the risk of leaving behind unauthorized tools, changes, or persistence mechanisms.
Reset Credentials
We reset credentials across the affected environment and reviewed privileged access to infrastructure, management systems, storage, and virtualization platforms.
Reviewed Outbound Network Activity
We analyzed network activity associated with the incident to determine whether customer data left the environment. Based on the evidence reviewed to date, we have found no indication that customer data was exfiltrated.
Current Status
We continue to work directly with a small number of partners whose systems require additional restoration or recovery work. Our team is supporting those partners throughout the process and providing individual updates as new information becomes available.
Once the investigation, recovery, and remediation work are complete, we intend to publish a more detailed summary of the incident and the changes we have made to strengthen the security and resilience of our environment.
Identified: We have restored connectivity for the majority of our clients and virtual machines, and the environment continues to stabilize. Our teams remain actively engaged in resolving the remaining issues.
At this time, we are still seeing isolated pockets of network configuration issues affecting a subset of customer environments, along with a number of individual servers that require additional attention. As we work through the recovery process, we continue to encounter small, one-off issues affecting some virtual machines, and resolving these is taking time. Our teams are addressing them individually as they arise to bring each affected environment back online.
Once the current issues are resolved, we will be conducting a full review of all virtual machines both those previously running and those currently running from snapshots to identify and complete any remaining recovery actions still available to us.
We have also received requests from some clients for copies of their individual backups. Please be aware that we are not able to fulfill these requests at this time, as we are still actively working through the restoration process and completing our assessment of the environment. We appreciate your understanding and will provide guidance on this once recovery is further along.
We do not have a precise completion time for all remaining items, as this remains an active recovery effort, but our teams remain engaged continuously until every environment is fully restored.
We sincerely appreciate your continued patience as we work through the final stages of recovery. We will continue to provide updates as additional progress is made.
Investigating: We have restored connectivity for the majority of our clients and virtual machines. Our teams are continuing to trace and resolve the remaining network issues so that the rest of the affected environments can be brought back online.
We remain actively engaged in the restoration process and will continue to provide updates as additional progress is made.
Investigating: We are continuing to restore client systems, with additional customers being brought back online on an ongoing basis.
During the recovery process, we identified an issue affecting our virtual networking infrastructure that requires us to manually rebuild customer WAN configurations. Our teams have been working continuously throughout the weekend and will remain engaged through the night to restore connectivity for as many customers as possible before Monday morning.
We sincerely apologize for the continued disruption and delays. We appreciate your patience as we work to bring all remaining customer environments back online as quickly and safely as possible. We will continue to provide updates as restoration progresses.
Investigating: Customer environments operating behind our physical networking infrastructure have been brought back online.
We are continuing to repair and validate the virtual networking configurations. We anticipate completing the virtual networking restoration today, after which we can begin bringing the virtual machines connected to those networks back online in a controlled manner.
We appreciate your continued patience and will provide additional updates as restoration progresses.
Investigating: We are currently bringing customer environments back online in a controlled and measured manner. This process is proceeding as planned, but it will take time to complete as we carefully manage the workload to avoid overloading the storage arrays.
Our teams are actively monitoring the environment throughout the recovery process. We will continue to provide updates as additional customer environments are restored and progress is made.
Investigating: Hello Partners,
I want to provide a continued update regarding the outage affecting one of our data center environments and the progress of our recovery efforts.
Our teams have remained fully engaged throughout the recovery process. We have now restored approximately 120 TB of data from July 9 and approximately 30 TB of data from July 10. All restored volumes and data are currently showing as healthy through our validation processes, and we remain actively engaged in continued data validation to ensure integrity and stability across the environment.
In parallel with data restoration, we have begun network reconstruction efforts. Our networking team is actively rebuilding and verifying WAN configurations and related network settings to ensure a stable and secure environment as services are brought back online.
With confidence in the stability and security of the network and restored data, we have begun bringing client environments back online. Overnight, we initiated the restoration of customer virtual machines for testing and confirmation. To date, we have successfully brought up and verified approximately 150 customer virtual machines, confirming both operational functionality and data integrity.
Our teams have been working continuously through the night and will continue throughout the day to expand restoration efforts. Based on current progress, we expect customers to begin regaining access to their environments later today, continuing through the evening.
As part of our ongoing investigation, we have identified activity within portions of our underlying infrastructure that required us to take precautionary measures, including isolating systems and initiating recovery procedures. At this time, there is no indication that client data was accessed or removed from our environment, and our analysis confirms that no data exfiltration occurred. Our review of system logs and traffic patterns continues as we work to fully understand the scope and nature of the incident.
We understand the impact this outage has had on our partners and their customers, and we sincerely appreciate your continued patience as we work through the final stages of recovery. We will continue to provide updates as additional progress is made.
Denis Zhirovetskiy President AdeptCloud
Investigating: Our recovery efforts are continuing and will remain active throughout the night as data restoration progresses.
To support validation, we performed immediate volume recoveries into isolated environments. These recovered volumes have now been running for several hours with a limited number of isolated virtual machines powered on for testing. We have also cloned selected environments and data from test systems to further validate stability and integrity.
The next stages of recovery will include network configuration, auditing, and continued validation of restored volumes. Progress remains encouraging, with approximately 50 TB of data verified so far. We still have approximately 50–60 TB of data to move and are actively monitoring the restoration and validation processes as they continue.
Our teams remain fully engaged, and we will continue to provide updates as additional progress is made.
Investigating: Hello Partners,
I want to personally provide an update regarding the major outage affecting one of our data center environments. I also want to be as clear and transparent as possible about the situation and the recovery work currently underway.
Early this morning, we identified multiple servers that had lost network connectivity. We immediately engaged both the data center’s network engineering team and our internal network engineering team to begin investigating. Throughout the day, we have systematically isolated and tested the components of our network, storage infrastructure, and virtual environments.
During the investigation, we identified activity that required us to treat the situation as a potential security incident. Out of an abundance of caution, I made the decision to take the storage network offline and begin disaster recovery operations.
Our teams are currently moving more than 100 TB of data across multiple storage arrays and restoring systems from point-in-time snapshots. This is a significant recovery operation that requires careful validation at each stage to ensure the integrity and safety of the restored data.
We are currently testing backups from approximately 10:00 a.m. Central Time today, July 10, 2026, as well as backups from approximately 10:00 a.m. Central Time yesterday, July 9, 2026.
At this time, we have not confirmed whether a breach occurred. In parallel with the recovery effort, we are conducting extensive log reviews and analysis across our Phoenix clusters, networks, storage systems, and supporting infrastructure to determine the full scope and nature of the incident.
No one wants to begin their Friday with a service disruption of this magnitude. We understand the significant impact this outage has on our partners and their customers. We have a dedicated team working continuously on recovery operations, and I am personally involved in coordinating and overseeing this process.
Because of the volume of data involved, recovery and validation are taking time. Based on our current progress, we expect to begin bringing virtual machines and services back online overnight and into Saturday morning, July 11, 2026. This remains an estimate and may change based on the results of our data validation and security review.
Due to the widespread nature of the recovery effort, we cannot safely restore individual virtual machines one at a time or prioritize a single system independently. The storage, network, and virtualization layers are interconnected, and we must ensure the entire environment is restored in a controlled manner that protects data integrity and prevents further disruption.
We expect to provide additional updates every few hours as storage volumes are migrated, restored, tested, and validated.
AdeptCloud appreciates the patience and understanding of every partner affected by this incident. We sincerely apologize for the disruption and will continue to communicate openly as more information becomes available.
Denis Zhirovetskiy President AdeptCloud
Investigating: During our ongoing investigation, we identified indicators consistent with a potential compromise involving one of our dedicated storage servers. Upon identifying these indicators, we immediately isolated the affected management system and associated storage infrastructure to contain the issue and minimize any further potential impact.
The machine believed to be the source of the activity is now fully isolated and is being retained for further investigation. We have also reviewed other systems and, at this time, have not identified any additional indicators of compromise. However, the investigation remains ongoing, and we have not yet fully determined the scope or nature of the incident.
We are working closely with our datacenter partner to restore storage systems from previously validated snapshots. As part of this process, we are currently restoring a single datastore to validate the recovery procedure, confirm the integrity of the restored data, and help us better assess the impact before proceeding with additional storage systems.
Based on our investigation, we believe the networking symptoms observed earlier were related to activity originating from the affected management virtual machine. Our current focus is on safely restoring services while continuing to investigate the root cause and confirm the integrity of the affected environment.
We understand the impact this outage is having and appreciate your continued patience. We will provide additional updates as recovery progresses and more information becomes available.
Investigating: We continue to make progress on the storage recovery process. Early indicators remain encouraging, and the restoration and validation activities are progressing as expected.
To expedite resolution, we have dedicated one team to restoring storage services while a second team continues investigating the underlying cause of the incident. This parallel approach allows us to restore service as quickly as possible while ensuring the root cause is fully understood and addressed.
We remain committed to restoring services safely and as quickly as possible. We sincerely appreciate your continued patience and will provide additional updates as significant progress is made or within the next two hours, whichever comes first.
Investigating: We are currently working through the process of mounting and unmounting storage volumes as part of our recovery efforts. This is a time-intensive process, and we are carefully validating each step to ensure data integrity and a safe restoration of services.
We appreciate your continued patience while this work is underway. We will provide additional updates as significant progress is made or within the next two hours, whichever comes first.
Investigating: We have identified an issue affecting our storage arrays and are actively working to restore them to a previous snapshot as part of our investigation and recovery efforts. This process will help us further isolate the underlying issue and validate system integrity before restoring services.
We understand the significant impact this outage is having and sincerely appreciate your patience. At this time, we are unable to provide an estimated time for completion of the restoration and verification process. We will continue to share updates as additional information becomes available.
Investigating: We are continuing to work with the datacenter engineering team to resolve this incident. We understand the frustration caused by the extended disruption and sincerely appreciate your patience as our teams work through this issue.
Please know that we are doing everything we can to restore service as quickly and safely as possible. We remain actively engaged in the investigation and will continue to provide updates as new information becomes available.
Investigating: We continue to work alongside datacenter engineers to investigate the root cause of this incident. Our teams remain actively engaged in troubleshooting and evaluating all potential causes.
At this time, we do not have an estimated time for service restoration. We understand the impact this outage is having and appreciate your continued patience as we work to resolve the issue. We will provide another update as soon as additional information becomes available.
Investigating: We continue to actively investigate this issue in collaboration with the datacenter engineering team. At this time, we do not yet have an estimated time for service restoration.
Our teams remain engaged in identifying the root cause and implementing the appropriate remediation as quickly as possible. We understand the impact this outage is having and appreciate your continued patience. We will provide another update as soon as additional information becomes available.
Investigating: Our investigation has confirmed that both power and network connectivity within the datacenter are operating normally. We are now focusing on what appears to be a potential storage-related issue.
This is proving to be a complex incident, and we are continuing to work closely with datacenter engineers to isolate the root cause and restore service as quickly as possible. We understand the impact this is having and appreciate your patience. We will provide additional updates as soon as more information becomes available.
Investigating: A datacenter engineer is currently on-site at the affected rack, and we are actively investigating the issue together. We have confirmed access to our out-of-band management systems, which indicates external connectivity to our Cisco network infrastructure. However, traffic is not currently passing beyond that point into the environment.
Investigating: We are continuing to investigate the issue affecting our PHX datacenter. Preliminary indicators suggest the incident may be related to either networking and/or power infrastructure. Our engineering team is actively working alongside datacenter personnel to isolate the root cause and restore normal operations as quickly as possible.
Investigating: We are receiving reports of a widespread outage across our PHX Datacenter and its VM's. We are currently investigating this issue and interfacing with datacenter engineers to find the issue and get this resolved as quickly as possible. We will update this status as more information becomes available.
ACP - Nodes
ACP - Power
Adeptcore Cloud-Hosted
ACP - Cloud-Hosted
Adeptcore Third Party Tools
Zoom Zoom Cloud Room Connector
Zoom Zoom Software
Zoom Zoom Meetings
mailgun Inbound email processing
mailgun SMTP
mailgun Events & Logs
PagerDuty Notification Delivery
PagerDuty Web Application
PagerDuty REST API
PagerDuty Webhooks
Adeptcore Third Party Service Advisories
In response to a critical cPanel vulnerability (CVE-2026-41940) disclosed by the vendor, we are proactively patching all cPanel servers across our environment.
As a precaution while updates are rolling out, public access to the cPanel/WHM/Webmail management ports (2083, 2087, 2095, 2096) has been temporarily restricted. Your websites, email, and other services are not affected only the browser-based management interfaces. If you need access to cPanel or WHM during this window. Please submit a support request if you require access and we can setup a custom whitelist for you in the meantime.
We expect all servers to be patched and normal access restored within the next 48–72 hours. We'll send a follow-up once the work is complete. Thank you for your patience.
Monitoring: In response to a critical cPanel vulnerability (CVE-2026-41940) disclosed by the vendor, we are proactively patching all cPanel servers across our environment.
As a precaution while updates are rolling out, public access to the cPanel/WHM/Webmail management ports (2083, 2087, 2095, 2096) has been temporarily restricted. Your websites, email, and other services are not affected only the browser-based management interfaces. If you need access to cPanel or WHM during this window. Please submit a support request if you require access and we can setup a custom whitelist for you in the meantime.
We expect all servers to be patched and normal access restored within the next 48–72 hours. We'll send a follow-up once the work is complete. Thank you for your patience.