Previous incidents

We have temporarily disabled Node.js applications across our cPanel and DirectAdmin hosting servers, as well as on Managed VPS services, as a precaution following a recently announced high-severity security vulnerability in Node.js.

This is a precautionary measure to protect customer data and server integrity. During this time, websites and applications that rely on Node.js will be unavailable. Other services on these servers, including PHP websites, email and databases, are not affected.

W...

For our clients who are utilising the Updraft plugin, we recommend following updates from the plugin provider to manage the 3rd-party plugin.

https://teamupdraft.com/blog/security-incident-october-2026/#updraftcentral-cloud-users-please-do-this-today

Thank you for your patience.

Our team is happy to advise that security patches for the critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) have now been completed and deployed across our hosting servers.

As a precaution to safeguard our clients' data and our network infrastructure, webmail was temporarily disabled while this work was carried out. Webmail has now been restored and is available as normal. Our website, Client Portal and support portal are also back online, so yo...

Thanks for your patience.

An Exim update caused conflicts with the spam filter software (MailScanner), which in turn caused some degraded performance for outgoing emails.

This has now been patched and resolved by our engineering team.

We apologise for the inconvenience caused.

If you are still experiencing issues, please reach out to our friendly support team through your MyDreamIT account.

Thank you for your patience on going support.

Our investigation into this incident is now complete.

Our findings have not changed since our previous update. We found no evidence that customer VPS instances were accessed or compromised, including the websites, files, databases and mailboxes stored within them.

The unauthorised SSH keys deployed during the incident were not used successfully, and those keys and the associated malicious software packages have been removed.

We have confirmed that customer names and email addresses stored...

We've identified malicious traffic causing degraded performance. Our engineering team have made adjustments and are currently monitoring the server.