Security Notice

On 24 July 2026 an unauthorised party gained control of DNS for cubepilot.org for part of one day and used it to intercept traffic to our internal business systems. We have taken our cubepilot.org services offline while we verify them. Email on cubepilot.com is unaffected and remains the way to reach us. This page is where we will post updates.

The certificates obtained by the attacker covered every cubepilot.org subdomain, so credentials entered on any of our services on 24 July may have been captured — the portal and the forum included. If you used the same password anywhere else, change it there now.

We are verifying checksums on every published image. Until we confirm them here, do not flash anything downloaded during that window. Images you obtained before 24 July are unaffected.

CubePilot will never ask for your password, a verification code, or payment details by email or message. Forward anything that does to [email protected] .

If you receive changed bank details or a payment request that appears to come from us, confirm it with your usual by phone before acting on it.

We regained control of our domains and restored our own nameservers on 24 July, took the affected systems offline, and had the fraudulently issued certificates revoked. We have preserved the evidence, reported the incident to the Australian Cyber Security Centre, and referred it for law enforcement investigation. External providers involved have been notified.

We are working through what data was reachable during the period of unauthorised access. Where personal information was involved, we will the people affected directly and meet our obligations under the Privacy Act. We would rather tell you something confirmed late than something wrong early.

Questions this incident, or something suspicious to report: [email protected] . For orders and support while the portal is offline, your usual CubePilot representative directly.