Skip to content
Data Breach at FirstVDS Exposes Customer Credentials

Data Breach at FirstVDS Exposes Customer Credentials

First seen 20 Oct 2026, 18:46 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 20, 2026 at 20:48 UTC
  • •Hackers exploited a vulnerability in ISPsystem's VMmanager 6 software.
  • •Sensitive customer data, including passwords and cloud credentials, was stolen.
  • •FirstVDS has implemented security measures but the vulnerability is not fully patched.

Hackers exploited a vulnerability in VMmanager 6, a server management software by ISPsystem, affecting Russian hosting provider FirstVDS. The breach, discovered on October 15, 2026, allowed attackers to access sensitive customer data, including passwords and cloud service credentials, without disrupting operations. The malware used mounted disks in read-only mode, enabling data copying without leaving traces. FirstVDS reported that the breach impacted only part of its infrastructure but did not disclose the number of affected customers. The company has since disabled external access to the vulnerable system and blocked communication with the attackers' server. ISPsystem has issued several patches, but the vulnerability remains partially unaddressed. Customers are advised to change their credentials as a precaution.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-15
Breach discovered
FirstVDS identified unauthorized access to customer data via VMmanager 6.
Therecord.Media
2026-10-19
Public disclosure of breach
FirstVDS publicly announced the breach and advised customers to change their credentials.
Therecord.Media
2026-10-20
ISPsystem releases patches
ISPsystem issued multiple patches for VMmanager 6, but the vulnerability remains partially unaddressed.
Scworld

More articles in this cluster (2)

Following this threat?

Track FirstVDS in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (9)

1 / 3

Common questions

What data was stolen?
Hackers accessed sensitive customer data, including passwords, cloud service credentials, and cryptocurrency wallets.
How many customers are affected?
FirstVDS has not disclosed the number of affected customers or servers.
What should customers do now?
Customers are advised to change their passwords and access credentials immediately.