Temporary Service Notice

Updated: 9-25-2026 5:30 PM Arizona time

Current Status

Ticketing & Billing Portal Offline
Website Offline
VPN & IPMI Access Offline

Contacting Us

The only way to reach us right now is by email to support@ioflood.com. Please send it from an authorized email address on file for your account. Mail from any other address can't be acted on.

What This Means for You

  • Payments: We are not accepting PayPal or credit card payments at this time.
  • Overdue servers: Servers with overdue invoices will not be suspended while this notice is in effect.
  • Destructive requests are paused: Until a secure way to submit tickets is back online, we won't process anything destructive, such as password resets or reinstalls. These will resume once we consider the ticketing system secure.

What Happened

We are investigating a security incident affecting our systems. Our logs show that an unauthorized party downloaded our ticketing system's email logs, along with customer contact details (name, company name, email address, phone number and address).

Any sensitive information ever sent to us, or sent to you by us, through the ticketing system should be considered compromised. For example, if you ever emailed us a server password, or we ever emailed one to you, the attacker likely has a copy of that email.

Payment information: The activity logs do not show any access to payment details. Credit card payments are handled through Authorize.net Customer Information Manager (CIM), so we do not store full credit card details on our servers.

PayPal: Our PayPal API details were compromised. No unexpected transactions have been noted. Out of an abundance of caution, we have closed our PayPal account to prevent unauthorized access.

To contain the incident, our website, billing portal (manage.ioflood.com), support and ticketing system, and the VPN used for IPMI access are offline. VPN and IPMI access will stay offline until all of those credentials have been changed and re-issued.

Action Required

Immediately change any server passwords, SSH credentials or access keys, especially any that have ever been sent to us or sent to you by email.

Doing this as soon as possible is critical to keeping your own servers and data secure.

Check your PayPal and credit card accounts for unexpected charges. We have no reason to believe the attacker was able to cause any charges to your account, but to be safe, review your statements. If you see anything unexpected, inform your financial institution right away.

Thank you for your patience. We will post updates here, including secure ways to reach support, as services come back online.