Beget is currently restoring its virtual hosting infrastructure following a cyberattack that occurred on the night of November 2, 2026. The incident involved unauthorized access to the management layer and the execution of data-wiping scripts, resulting in the loss of data across VPS, S3, and Kubernetes environments.
The restoration process for each server follows a four-stage protocol: server preparation and network configuration, environment setup, data restoration from backups, and the reactivation of virtual hosts and domain bindings. The company is currently running restoration processes in parallel for 66 servers.
As of the latest update, over 18,000 websites have been brought back online. The company has implemented additional tools to accelerate mass recovery, as the current scale of the incident exceeds the capabilities of standard backup systems designed for individual account recovery.
The Coordination Center for TLD RU and RF has temporarily suspended Beget's accreditation as a domain registrar. While the company cannot register new domains or accept incoming transfers during this period, it remains obligated to maintain existing domain names registered prior to the suspension.
Beget staff are operating in crisis mode, with the DevOps department working around the clock. Users can currently download VPS file backups via the cp.beget.com control panel.


