Security Notification
Date: 11/06/09
Effecting: Kongreg8 Servers 1 and 2
Threat level: (4/5)
Current Status: CLOSED
Detail:
A sustained attack on US-based virtual servers and a security flaw in the hosting company's
management utility has led to data loss in many American servers.
The UK servers appear to be mostly unaffected, TeesCode's Kongreg8 server 1 and 2 have been
switched off as a precautionary measure whilst the virtual systems are moved to a different
system.
This was a worldwide attack which brough down around 150,000 websites and was documented in recent news. No Kongreg8 data has been compromised as the Kongreg8 system lives within it's own sercurity container. This was an issue with the overriding hosting company's management utility and not the actual Kongreg8 virtual server.
Service will be resumed as quickly as possible once the team, who have been working flat out for the past five days, have completed their investigation and moved virtual platforms for all of the 80,000-odd companies affected.
We appreciate this may be a concern to clients and would like to assure everyone that it is an isolated incident with the hosting providor and that it has not compromised the integrity of the Kongreg8 services residing on the systems.
We will keep all customers up-to-date with the latest information as it is made available to us and we appreciate your patience in what has become an international incident with federal investigation being undertaken.
TeesCode Staff
Update 15/06/09
It now appears that the host server containing the Kongreg8 VPS has been critically damaged. The data held has been deleted as part of the cracking process affecting systems last week. We are now working to rebuild the systems from the TeesCode backups on brand new hardware.
The intended purpose of the attack seems to have been to take as many systems offline as possible with no regard to data content. All of the servers that have been damaged have not been accessed but ordered to delete themselves by the compromised management utility.
The new systems are being rebuilt using a different VPS technology for enhanced security. All Kongreg8 customers
effected by this outage are being offered two extra weeks on their Kongreg8 hosting contracts.
Once again,
no data has been removed from the systems, viewed or stolen. This was a specific delete attack designed to take
as many systems out as possible with one removal command.
TeesCode Staff
Update 27/06/09
All Kongreg8 servers are now back online with new IP addresses and rebuilt virtual hosted systems. We have moved from using the management console that caused problems with the previous hosting company.
Due to the extended period of downtime caused by requesting new IP blocks we have credited all Kongreg8 customers effected by the recent problems with 1 extra month of hosting for free.
This issue is now closed.
TeesCode Staff