Osegi
Security·2 min read

Beget outage: 95% of shared hosting servers are back online

Russian host Beget says 150,000 sites are restored from backups after a cyberattack wiped its cloud. Here is what works again and what is still missing.

Rows of servers in a data center with a technician working at a laptop during a recovery effort.
Image: Хабр

Twelve days after a cyberattack knocked out Russian hosting provider Beget, the company says most of its shared hosting is running again. Its engineers have brought back 95% of virtual hosting servers and 94% of dedicated servers. A lot of work is still ahead.

From backups, Beget has already restored more than 150,000 sites that have SSL certificates installed. Customers whose sites are back now get a support section in the control panel. Everyone else can write to support@beget.com, though replies are slower than usual because of the volume of requests. The company says it has added extra support staff.

What happened to Beget?

In the night of 1 to 2 November 2026, attackers got into the control layer of Beget's whole architecture and ran scripts that wiped data. In the cloud infrastructure (VPS, S3 and Kubernetes) all data was lost, along with CDN and IP settings. Only file backups of VPS machines survived. The company has declared force majeure and is rebuilding the cloud from scratch.

Separately, the Coordination Center for the RU and РФ domains suspended Beget's accreditation as a registrar in early November. Beget cannot register new names in those zones or accept transfers in from other registrars, but it must keep supporting domains registered before the suspension.

What works now, and what is next

Most of the control panel is back, including the File Manager. Domain handling is returning in stages. You can now request an AuthInfo code, which you need to move a domain elsewhere, through the Beget site. International domains can also be renewed under "Domains and subdomains".

VPS backups are visible again under "Backups". Beget added a new way to find them: you request a check for a specific VPS and confirm you have access to the server.

Still to come are the CronTab job scheduler, ordering dedicated IP addresses and other features. The company says it is working on the panel in real time.

Apps worth a look

SUMO: the number puzzle

Tap the right tiles, add them up, hit the target. Easy to learn, hard to master. Free, for all ages.

Tags:begethostingcyberattackoutagevpsdomains

More from this day

See all →

More in: Security

See all →