In the night from November 1 to November 2, 2026, the Beget infrastructure suffered a cyberattack. Unauthorized access was gained to the management control system, which led to the execution of scripts that wiped data.
The company reported the total loss of VPS binary backups. Data stored in the cloud infrastructure, including VPS, S3, and Kubernetes, was lost. Additionally, CDN settings and IP addresses were compromised.
Beget is currently attempting to recover data using file-level backups. The provider initially classified the incident as force majeure, though the company continues to search for ways to restore the lost information.
Industry experts suggest implementing security measures such as Role-Based Access Control (RBAC) and Identity and Access Management (IAM) to prevent similar incidents. These systems help restrict administrative privileges and ensure timely access revocation.
The use of Zero Trust principles and multi-factor confirmation for critical operations is recommended to prevent a single user from destroying an entire infrastructure. Storing backups in independent, external cloud environments is also advised.
