Beget November 6, 2026: over 60% of hosting restored after cyberattack

On November 6, 2026, hosting provider Beget released an update regarding the restoration of its IT infrastructure following a major cyberattack that occurred on the night of November 1-2. While the company has already restored everything that could be brought back quickly, the next phase requires deep database restoration and technical intervention.

• More than 60% of virtual hosting capacity has been launched;
• VPS file backups will be available to only half of the users due to unrecoverable data loss;
• Cloud infrastructure (VPS, S3, Kubernetes) was entirely destroyed and is being rebuilt from scratch;
• The company is working on the incident alongside police, cybersecurity firms, and state authorities (TCI/CC, NCCCI).

Hosting and Server Recovery Status

Beget stated that all surviving servers with backups have been checked and the backup database has been updated. The remaining hosting servers suffered severe damage from the attack and require significant time to recover from backups. The team aims for a complete restoration of projects. Network configurations are being updated today to integrate hosting and backup servers for mass restoration.

The control panel functionality will be launched in parts: DNS, domain management, databases, and websites first. Some internal data and account-to-service links were lost and are being reconstructed manually. Billing, secondary services, and non-critical functions will be restored at a later stage, and billing remains suspended while services are down.

VPS and Cloud Infrastructure Challenges

Unfortunately, recovering all data is impossible. According to current estimates, VPS file backups will only be available to half of the users. Matching specific user data to backups is technically challenging. The company expects to provide users with the ability to download their backups directly from the control panel within approximately five days.

The cloud infrastructure was completely wiped out by zeroing scripts during the attack. Cloud architecture and management services have been rebuilt, and the team plans to connect the first servers within 1–2 days, followed by integration and testing stages.

Security Measures and Crisis Operations

The entire Beget team, especially the DevOps department, continues to operate in a 24/7 crisis mode until the incident is fully resolved. Considering potential lingering threats, engineers are thoroughly auditing and redesigning every point of the infrastructure that could pose a vulnerability, even those previously considered safe. Beget thanked its users for their continued patience and support during this unprecedented outage.