Abanoub W.
Serious Security Incident Caused Permanent Data Loss
My VPS with CloudCone went down due to a security breach in their platform (Virtualizor). An attacker accessed the LA VPS nodes, damaged my VPS disk, and all data was permanently lost and irrecoverable, as confirmed by CloudCone themselves. This incident caused: Complete loss of my server data Extended downtime Business disruption and financial losses I did not have backups, and because the issue was caused by a platform vulnerability outside my control, my services could not be restored at all. This was also the second major outage within one year, which raises serious concerns about reliability for business-critical use. While CloudCone explained the incident and listed future precautions, the damage was already done. If you are running production systems or client websites, be aware of the risks.
Response from CloudConeFeb 6, 2026
We Are Truly Sorry We apologize for the impact this incident had on you, especially the data loss, downtime, and disruption to your services. We fully understand how frustrating this situation was, and we sincerely regret that your experience did not meet the level of reliability and communication you expect from us. What Happened As explained in our initial incident report (Please read here: https://app.cloudcone.com/incident-346624), a third-party VPS deployment platform was compromised through a vulnerability, which allowed unauthorized access to certain LA host nodes. This caused disk corruption on the affected nodes. Despite multiple recovery attempts, including raw device analysis and filesystem reconstruction, the data on these nodes was unfortunately irrecoverable. Only a subset of LA VPS nodes were impacted, and customer billing and personal data remained secure. Please note that the initial public report took time to finalize because the investigation was still ongoing. However, updates were continuously provided on our status page (https://status.cloudcone.com/) from the start of the incident so customers could stay informed in real time. Next Steps for Users During recovery, affected systems were isolated and rebuilt from a clean state. The impacted nodes are now ready for VPS re-installation, and once customers see the re-install banner in their control panel, it’s safe to proceed with rebuilding services and restoring any available backups. Due to the scale of the event, reinstallations were processed through a queue and typically took 3–6 hours to complete. Even though this incident was out of our control and isn’t eligible for standard SLA or compensation credits, our team is still reviewing cases to see if any compensation can be offered. Improvements Taken Following the incident, we rotated credentials, strengthened firewall and IP-level controls, rebuilt the deployment gateway, and began transitioning away from the affected third-party platform to our own in-house virtualization platform. We acknowledge the disruption this caused and sincerely apologize. This external attack will not bring us down. We are continuing to strengthen our infrastructure, enhance our incident response, and improve customer communication to better support our valued clients.



