Cyberattack wipes cloud data at major Russian hosting provider Beget
Cyberattack destroys data at Russian web hosting provider Beget, impacting hundreds of websites.
A cyberattack has severely impacted Beget, a major Russian web hosting provider, destroying data across its cloud infrastructure and disrupting hundreds of websites. The attackers gained access to management systems, enabling them to erase data from virtual private servers, cloud storage, and Kubernetes services, and also wiped binary backups. While file-level backups remain, recovery is expected to be a lengthy process requiring individual server inspection.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Beget?
Get an email when a new story names Beget, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonAttackers gained access to Beget's management systems, giving them the ability to erase data across virtual private servers, cloud storage, Kubernetes services, and binary backups in a single destructive campaign. The root failure was insufficient access control around critical management infrastructure, combined with backup systems that were reachable and destroyable by the same attacker who compromised production. This matters because hosting providers are custodians of thousands of customers' data, meaning a single breach can cascade into mass data loss at scale. The destruction of binary backups left only file-level backups, turning a recoverable incident into a prolonged, server-by-server restoration effort.
What helps against this
How we list vendors- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.
- Immutable backup and recovery
Ransomware cannot delete or encrypt your way back.
- Incident response retainer
Experts are on call before the worst day, not searched for during it.