Russian hosting company Beget rebuilds cloud platform following destructive wiper attack

Russian web host and domain registrar Beget is rebuilding its cloud infrastructure from scratch following a destructive cyberattack on the night of November 1, 2026. Intruders breached the management layer of the company's entire architecture and executed data-zeroing scripts, forcing Beget to disconnect all servers from the network. The intrusion wiped data across cloud storage facilities, virtual private servers (VPS), and Kubernetes environments, alongside CDN settings and IP configurations. [1][2]

Beget reported that VPS binary backups were destroyed, and surviving file backups will be recoverable for only about half of VPS users. The provider, which serves more than 200,000 customers, stated that more than 1,000 servers must be manually inspected for vulnerabilities and malicious scripts before returning online. More than a week after the incident, Beget said it had restored 60% of shared hosting and 40% of its managed dedicated servers, though recovery remains slow because matching existing backups to users is technically complex. [1][2]

Company investigators found no evidence that data was downloaded or altered, concluding the assault aimed purely at destruction. Founded in 2007, Beget controls 14.7% of the Russian market as the country's second-largest .ru domain registrar. The attack comes after the company faced European Union sanctions for providing hosting services in Russian-occupied regions of Ukraine, including Crimea, Donetsk, and Luhansk. [1][2]