Issues with Shared Linux Hosting Server - Morgana

Message

Our shared hosting server, Morgana was compromised at 14:50. The attackers have removed data from both the direct admin configuration and the users home directories.

The most recently backup we have of the server is from the 27th of August.

We are working on restoring what we can from this backup now.

Once all of the data has been synced from the backup to the server, we will then recreate any user accounts that we're not within the backup.

The ETA on the initial backup restore will be within the next few hours, all going well. Once complete we will move on to creating the accounts we could not restore.

We will keep this blog post as up to date as possible as we progress.

Update 17:06 - We have restored the user data from the backup - If anyone is still experiencing any issues please let support know.

Update 1137 - Our technical team have been working around the clock in relation to this matter.
If you are still experiencing any  issues  please contact our support team directly via email (support@blacknight.com) and we will make every attempt to rectify any issues. Please include the domain name and as much detail as possible of the issue you are experiencing.

Update 1418 - Update:

Our senior technical staff have now completed all work on restoring data in relation to this matter.

Any backups of data that we could retrieve have been retrieved or are in the final stages of being retrieved i.e. the restore is still ongoing.

Please note that if your website or its files etc., are no longer visible at this juncture it is most likely that they are not retrievable from our servers and we would, therefore, ask you to restore them from your own backups.

Our technical support team is doing their utmost to reply to queries as quickly as possible

In relation to the illegal breach of this server we have contacted the relevant authorities and intend to update on this as soon as their investigations are complete

Update 1519 - Some email users may have been experiencing errors eg. 550 or similar errors. This issue has now been resolved.