Russian hosting provider FirstVDS says hackers stole passwords, cloud access credentials, configuration files, cryptocurrency wallets, and other customer data from some virtual servers. The company said attackers exploited a vulnerability in ISPsystem VMmanager 6, a virtualization management platform, then deployed malware that mounted customer server disks in read-only mode to copy data without disrupting service. FirstVDS says the issue is not fully fixed and ISPsystem has issued multiple patches while advising customers not to restore external access to the management interface yet.
Why it matters: Customers who store secrets or production data on affected FirstVDS virtual servers should assume that information was copied and rotate passwords, cloud keys, and wallet secrets immediately. The vendor says the flaw is still not fully remediated, so this is an active and urgent infrastructure risk for hosting customers and potentially other VMmanager 6 users.
2026.10.19
100% relevant
This article appears to be the first tracked report establishing the FirstVDS breach and tying it specifically to exploitation of ISPsystem VMmanager 6.
← Back to all stories