Pax8 Platform Status

Monitoring: Today, we successfully sent access instructions to all impacted partners, enabling them to securely review their partner-specific information related to this incident. That access remains limited to the Pax8 Marketplace Primary Partner Admin and/or Partner Admin for each organization.

Our focus continues to be on responding directly to partner questions and supporting impacted partners as they review their data and follow up with us. In parallel, our internal review remains ongoing as we continue to strengthen safeguards and processes.

Unless new and significant information arises, the cadence of Status updates is expected to slow as we prioritize ongoing engagement and support for impacted partners. We will continue to post updates here if there are material developments.

Partners with questions or concerns should submit a Support ticket through the Pax8 Marketplace referencing UK Partner Information Incident – Jan 13, 2026, and our team will follow up.

Monitoring: We have begun providing impacted partners with secure access to the partner-specific information that was included in the email attachment.

Impacted partners are receiving a direct email with a unique link to access their organization’s information. That email is going to the Pax8 Primary Partner Admin. Access to the data is limited to the Pax8 Marketplace Primary Partner Admin and/or Partner Admin for each organization.

If you are an impacted partner and your Primary Partner Admin has not received the email, please submit a Support ticket through the Pax8 Marketplace referencing UK Partner Information Incident – Jan 13, 2026.

Additional incident context remains available on this Status page, and we will continue to post updates here as partner outreach and our incident review progress.

Monitoring: We recognize that we have a responsibility to safeguard the partner-confidential information entrusted to us, and we apologize that this incident occurred.

We are committed to transparency and will continue to post updates on this Status page as we confirm additional, relevant facts about what happened and as we advance our outreach to impacted partners.

If you are an impacted partner, you have already heard from us directly, through your Pax8 partner admin.

Specifically, this incident:

• Affected 1,800 partners, all UK-based, except for one Canada-based partner
• Did NOT affect any personally identifiable information (PII), authentication credentials, payment data, or any information enabling system access

What Happened On January 13, 2026, we identified that an email was sent to 40 UK-based partners with an attachment that inadvertently included limited internal business information relating to approximately 1,800 partners. The information in the attachment is primarily used for day-to-day operational reporting. It reflected Pax8 pricing and program-related information associated with 17 SKUs within four Microsoft Modern Work product categories.

Below is a sample graphic showing the exact fields that were included in the email attachment.

<img src="https://www.pax8nebula.com/m/4fb601cff95925ce/original/DataExample13Jan2026.png?w=800&h=400&fit=crop" alt="Sample style="max-width: 100%; height: auto; margin: 15px 0; border-radius: 8px;">

Next Steps If you are one of the 1,800 impacted UK partners, we will be providing you with secure access to the specific data that was affected for your organization and was included in the attachment. We appreciate your patience as we complete this outreach, and again, we are committed to answering your questions directly and transparently.

Our incident review is ongoing, and includes a detailed examination of how this occurred. We expect to put enhanced safeguards and processes in place to prevent a similar incident in the future. However, our primary focus at this moment remains direct engagement with impacted partners.

If you have questions about this matter, please submit a Support ticket through the Pax8 Marketplace referencing “UK Partner Information Incident – Jan 13, 2026,” and our team will follow up.

Monitoring: A fix has been implemented and we are monitoring the results.

Investigating: On January 13, 2026, we identified that an email was inadvertently sent to fewer than 40 UK-based partners with an attachment that included limited internal business information reflective of the Pax8 pricing and some aspects of a vendor program for approximately 1,800 partners (one in Canada, the rest UK-based).

We immediately reached out to all recipients to request deletion of the email and attachment and to confirm completion. Every impacted partner has been notified.

In parallel, we have launched an internal review to determine how this occurred and to prevent recurrence.

If you have questions or concerns, please submit a Support ticket through the Pax8 Marketplace and reference: UK Partner Information Incident – Jan 13, 2026.