The Record reported that ActiveCloud, a Belarusian cloud company, was hit by ransomware, which locks data until the victim acts. ActiveCloud said attackers encrypted parts of its systems, including its E-Cloud hosting platform, E-Cloud Protected and SmartMail email. It announced the attack on Tuesday and said on Friday that main services were back.
ActiveCloud said it found no sign of stolen customer data. It has not named the attackers or said how they got in. Some customers may face a slow road bringing back their virtual machines, which are servers that exist as software. Smartpress, a Belarusian news outlet hosted there, kept publishing. Local media reported Domino's Pizza outages in Belarus and blamed technical problems. No link to ActiveCloud has been confirmed.
Two Russian hosts were hit earlier this month. ESTT said attackers targeted its cloud management systems. At Beget, attackers reached infrastructure management systems and ran scripts that wiped data, and some virtual server backups were lost. These control layers run many customers' servers, so one breach there can reach all of them. No public evidence links the three attacks. Buyers can ask three things: Are our backups held outside the provider? Have we tested a restore? Do email and website share one host?