Security · Updated 21 Oct, 06:31 am IST
TeamUpdraft site breach exposed UpdraftCentral connection keys
Why it matters for readers: If you use Updraft plugins, know there was a breach and the company says plugin files were safe and keys were replaced.
- TeamUpdraft discovered unauthorized access to its teamupdraft.com website on the weekend of 17–18 October.1
- The developer believes the attacker accessed its customer database, including customer and billing details, order history, password hashes, and two‑factor settings.1
- Connection keys for UpdraftCentral, UpdraftVault, and UpdraftClone services may have been exposed, which could let a threat actor send commands to connected sites.1
- TeamUpdraft responded by closing the access route, signing out every account, and replacing keys and credentials that could have been affected; it said UpdraftPlus plugin files and downloads remain unaffected.1
Get a brief like this every morning
Uzha reads hundreds of sources and gives you the stories that matter for your work, with every source linked. Free.
Get started