Destructive Cyberattack Wipes Beget Cloud Data and Virtual Server Backups

Russian hosting provider and domain registrar Beget suffered a destructive cyberattack that disrupted hundreds of websites and erased cloud infrastructure data. The outage began around 03:50 Moscow time on November 2, affecting hosting, cloud, DNS and email services. Subsequent reporting said attackers accessed infrastructure management systems and executed data-erasure scripts, impacting virtual private servers, cloud storage and Kubernetes services. Beget lost all binary backups of its virtual servers, although file-level backups remained available for potential recovery. The initial access method remains undisclosed, and no group has publicly claimed responsibility.

Recovery requires manual inspection of more than 1,000 servers; some websites and customer-managed dedicated servers had been restored by November 4. Affected customers included business and government websites, a Russian Academy of Sciences website, RZD Tour and BelkaCar, which began moving services to another provider. Beget initially reported that file backups were available for the vast majority of shared-hosting and cloud resources, suspended charges during the incident and issued a force-majeure notification. The company advised customers to rotate potentially exposed credentials. Customers should verify usable recovery copies rather than assume that available file-level backups can fully replace erased virtual-server images.