Bene IT incident

Wordpress Exploit

Resolved after 19 hours 52 minutes, affecting Balance Nodes and Web Nodes and 1 more, on April 22, 2025.

resolved Apr 22, 2025, 09:58 PM UTC

The issue was caused by a plugin exploit and an update misconfiguration. Both issues have been resolved, and measures implemented to prevent it from happening again.

Started
Apr 22, 2025, 02:05 AM UTC
Resolved
Apr 22, 2025, 09:58 PM UTC
Duration
19h 52m
Detected by Pingoru
Apr 22, 2025, 02:05 AM UTC

Affected components

Balance NodesWeb NodesWebsite Admin NodesStorage Nodes

Update timeline

  1. identified Apr 22, 2025, 02:05 AM UTC

    Strange files and redirects have been found in the logs. Currently I believe a compromised plugin caused this issue but still investigating. All sites are down while infected sites are contained.

  2. resolved Apr 22, 2025, 09:58 PM UTC

    The issue was caused by a plugin exploit and an update misconfiguration. Both issues have been resolved, and measures implemented to prevent it from happening again.

Your product runs on more than Bene IT

Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.

Add your stack →