Skip to content
Canonical Websites Hit by Second DDoS Attack in 2026

Canonical Websites Hit by Second DDoS Attack in 2026

First seen 12 Oct 2026, 12:31 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 12, 2026 at 15:35 UTC
  • •Canonical's websites faced a DDoS attack on October 8, 2026.
  • •The attack caused over four hours of service disruption to key domains.
  • •No group has claimed responsibility for the recent attack.

Canonical's websites were disrupted by a distributed denial-of-service (DDoS) attack confirmed on October 8, 2026. This incident follows a more severe attack in April 2026, which was attributed to a hacktivist group. The recent attack affected key domains such as ubuntu.com and canonical.com, causing intermittent unavailability for over four hours. Developer services like Launchpad and the Snap Store remained operational during this incident. Canonical has not disclosed the attack's size or origin, and no group has claimed responsibility. The company is still working to fully restore affected services, which were reported to be mostly accessible again by October 9. The attack's nature involved overwhelming the company's public servers with traffic, leading to significant service degradation.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-04-30
Previous DDoS attack occurred
Canonical experienced a more severe DDoS attack attributed to a hacktivist group, affecting multiple services.
Securityweek
2026-10-08
DDoS attack confirmed
Canonical confirmed a sustained DDoS attack affecting its main websites, with intermittent availability reported.
Securityweek
2026-10-09
Service restoration efforts ongoing
Canonical reported that most affected services were accessible again, with ongoing efforts to stabilize the platform.
Omgubuntu

More articles in this cluster (4)

Following this threat?

Track Canonical in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (4)

1 / 2

Common questions

What services were affected by the DDoS attack?
The attack primarily impacted canonical.com, ubuntu.com, and related blogs and developer portals.
Is there any information on who conducted the attack?
Canonical has not disclosed the origin of the attack, and no group has claimed responsibility.
What steps is Canonical taking to mitigate the attack?
Canonical is working to restore services and stabilize its infrastructure following the DDoS attack.