GoKawiilBeget rebuilds cloud infrastructure after destructive wiper attack
Russian hosting provider Beget disclosed that an attacker breached its management systems on November 1 and deployed data-wiping malware across its entire architecture, erasing VPS, S3 and Kubernetes data along with CDN and IP configurations. More than a week later, the company has restored 60% of shared hosting and 40% of dedicated servers, while warning that VPS binary backups are completely lost and file backups survive for only about half of affected users.
GoKawiil's interpretation of the reporting above, not reported fact.
The incident shows how a single compromise of centralized management systems can wipe out backups across multiple service types at once, undermining the redundancy customers typically rely on. With roughly 1,000 servers needing manual security checks before restoration, the recovery timeline suggests the attack could have lasting operational and reputational costs for a provider serving over 200,000 customers.
- Attacker breached Beget's management layer on November 1 and ran data-zeroing scripts across its cloud infrastructure
- VPS binary backups were entirely lost, with file backups recoverable for only about half of VPS users
- As of the latest update, 60% of shared hosting and 40% of dedicated servers have been restored, with roughly 1,000 servers still needing manual checks
Western Digital My Book external hard drive — This attack is a stark reminder that relying solely on cloud or hosting providers for data safety is risky. Having an offline, local backup like a My Book external drive ensures your critical files survive even if a provider's infrastructure gets wiped. It's a simple, affordable way to practice the 3-2-1 backup rule at home or for a small business.
See Western Digital My Book external hard drive on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: bleepingcomputer.com, 2026-11-09
Published there as: “Russian cloud firm Beget rebuilds from scratch after data wiper attack”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.