We were hit. We are rebuilding.
An upstream cPanel zero-day was actively exploited against our infrastructure before a patch was available. Production clusters and snapshots, including the RAID1 mirror, are unrecoverable. We are rebuilding from zero and will personally help every affected customer recover.
What happened
A previously undisclosed (zero-day) vulnerability in cPanel, our hosting control plane, was disclosed and exploited in the wild before a patch could be applied. Our environment was compromised in that window.
The attacker did not deploy ransomware, malware, or persistence. They executed a destructive action: cluster data and backup snapshots powering Topazdom Technologies, all our subsidiary companies, and TopazHost customer accounts were destroyed. The remaining RAID1 mirror does not contain a usable recovery state.
At the time of impact, no off-cluster, third-party backup was in place.
Current status
Recovery plan
- Containment and customer outreach. Lock surviving accounts (DNS, registrar, payment, email). Reach affected customers using every contact channel we still have.
- New infrastructure stand-up. Different provider, hardened control plane, immutable off-site backups (3, 2, 1) from day zero.
- Per-customer recovery. If you have a backup of any kind, I will personally help you restore it on the new platform at no cost.
- Public postmortem. Full technical writeup of the attack pattern and our response, so the rest of the community can defend against it.
If you are an affected customer
Please reach out using any of the channels below with your domain name and a brief description of what you ran on our platform. We will reply with a recovery path tailored to your situation.
I am sorry. This should not have happened, and I am personally committed to making every affected customer whole to the maximum extent we can. Thank you for your patience while we rebuild.
— David Nzagha, Founder