Dear Valued Customer,

We sincerely regret to inform you that two of our servers (Rose and Mars) were also affected due to cPanel vulnerability. Despite immediate action from our technical team, the attacker was able to access systems and remove data. Additionally, the attacker gained access to backup server SSH keys from the infected environment, which resulted in backup deletion in one case.

You are not alone in this situation. A critical vulnerability in cPanel has been actively exploited worldwide, affecting an estimated 40,000+ servers and millions of websites globally, as reported by multiple international cybersecurity sources.

We fully understand the seriousness of this situation and deeply apologize for the impact this has caused to your services and business.

📊 Affected Servers Status

🟢 Server: Rose (72.9.145.44)

• Backups are available
• We have successfully restored all website files
• Some MySQL databases may not have been fully imported

👉 If your database is missing or incomplete:

• Please open a support ticket
• We will provide your .SQL backup file
• Our team can also assist with database import and restoration

🔴 Server: Mars (72.9.158.80) 

• This server was fully compromised
• Unfortunately, all data including backups has been permanently removed

👉 If you have:

• Local backups
• External/cloud backups
• Git or other stored copies

Please contact us immediately so we can prioritize your restoration.

🔧 What We Are Doing

• Both affected servers have been fully secured and rebuilt
• All systems have been patched according to the official cPanel security advisory
• Backup architecture has been redesigned to prevent single-point failure risks
• Stronger access controls and SSH key isolation have been implemented
• Continuous monitoring and intrusion detection systems are now active across all infrastructure

🔄 Data Restoration

Our technical team is fully prepared to assist you in restoring your services as quickly as possible.

Please open a support ticket, and we will:

• Help restore your website
• Assist with database recovery and imports
• Provide step-by-step technical support if needed

🎁 Compensation

As a gesture of our sincere apology and commitment to your trust, we are offering:

👉 3 months of free service for all affected accounts

We truly value your trust and partnership, and we are committed to supporting you through this situation. If you have any questions or need assistance, please do not hesitate to contact us.

Once again, we deeply apologize for the inconvenience and appreciate your understanding.

References:

• https://www.esecurityplanet.com/threats/cpanel-vulnerability-exposes-servers-to-takeover/
• https://www.securityweek.com/over-40000-servers-compromised-in-ongoing-cpanel-exploitation/
• https://techcrunch.com/2026/05/04/hackers-are-still-exploiting-the-cpanel-bug-to-gain-control-of-thousands-of-websites/
• https://www.techradar.com/pro/security/the-internet-is-falling-down-critical-cpanel-crlf-injection-vulnerability-puts-tens-of-millions-of-websites-at-risk-of-total-compromise-hosting-providers-urged-to-apply-cve-2026-41940-patch-immediately

Official advisory:

• https://support.cpanel.net/hc/en-us/articles/40073787579671-Security-CVE-2026-41940-cPanel-WHM-WP2-Security-Update-04-28-2026

— Your Hosting Team