At this time, my understanding is that nothing is going to come back online anytime soon. I am starting the process of migrating clients out of that data center.
The data center is RackSpace. (you can google rackspace outage and read pages of hate)
For the last 15 years I have used that data center and they have completely let me down. Not only have I personally lost 10+ years of mail and trusted them, it has affected many of you with your own email.
It is a complete mess over there.
They are wanting everyone to migrate to one of their other offerings. We are migrating, but it won't be with their services for sure!
You might ask, does the other offering mean they will migrate our mail off the current exchange server? Nope. I'll be calling them tonight to get in their 5-7 hour call back queue and inquire about being able to get archive/pst files of your mailboxes. I am NOT hopeful they can do anything for me or you.
I am utterly disgusted.
At this time, if I have not already reached out to you via phone/email, please submit a ticket here so we can get you in my own support queue so we can schedule a time to communicate your needs and get you taken care of. https://ticket.stormer.com Or just click on the tab at the top of this page for support ticket.
My plan for next week is to book as many of you as possible Monday-Friday to get you updated and squared away and discuss your options going forward.
Here is the latest from the data center:
Was this ransomware?
Yes.
How did the ransomware attack happen?
The investigation is ongoing and will take time to complete. Alongside our internal security team, we have engaged a leading cyber defense firm to investigate. The investigation is ongoing and is in its early stages.
Who was responsible for this incident?
Our investigation into the incident is ongoing and will take time to complete. To ensure the integrity of the ongoing investigation, we do not have additional details to share at this time.
What information might have been impacted?
The investigation is in its early stages. We will continue to investigate and share additional information with customers regarding the impact of this incident on customer data as needed.
Did you pay a ransom?
Our investigation into the incident is ongoing and will take time to complete. To ensure the integrity of the ongoing investigation, we do not have additional details to share at this time.
When will the investigation be complete?
Our investigation into the incident is ongoing and will take time to complete. We will continue to provide relevant updates as we have more information to share.
Are your systems secure?
Based on the investigation to date, we believe that this incident was isolated to our Hosted Exchange business. The Company's other products and services are fully operational, and we have not experienced an impact to our other email product line. Out of an abundance of caution, we have put additional security measures in place and will continue to actively monitor for any suspicious activity.
What further containment measures are you taking?
While the investigation is ongoing and in its early stages, out of an abundance of caution, our team of experts has put additional security measures in place and will continue to actively monitor for any suspicious activity.
What is your remediation and return to normal operations plan and schedule?
While the investigation is ongoing and in its early stages, at this time, we are unable to provide any timeline or expectations for restoration to the Hosted Exchange environment. We are working to provide customers with archives of inboxes where available.