Temporary Service Notice

We are investigating a security incident affecting our systems. Our logs show that an unauthorized party downloaded our ticketing system's email logs, along with customer contact details (name, company name, email address, phone number and address).

Any sensitive information ever sent to us, or sent to you by us, through the ticketing system should be considered compromised. For example, if you ever emailed us a server password, or we ever emailed one to you, the attacker likely has a copy of that email.

Payment information: The activity logs do not show any access to payment details. Credit card payments are handled through Authorize.net Customer Information Manager (CIM), so we do not store full credit card details on our servers.

PayPal: Our PayPal API details were compromised. No unexpected transactions have been noted. Out of an abundance of caution, we have closed our PayPal account to prevent unauthorized access.

To contain the incident, our website, billing portal (manage.ioflood.com), support and ticketing system, and the VPN used for IPMI access are offline. VPN and IPMI access will stay offline until all of those credentials have been changed and re-issued.