HostPapa breach notice reports unauthorized copy of customer account list
- Status
- Unverified: only social posts report this so far
- Kind
- Breach
- Vendor
- HostPapa
- First seen
Summary
A breach notice circulated on Mastodon, which the poster says is unconfirmed, states that an unauthorized party accessed an internal reporting data system from about October 15, 2026 and downloaded a list of customer accounts. The notice says the list may include names, company names, email addresses, phone numbers, city, country and account status, and that HostPapa is investigating with an independent forensic firm.
If you use HostPapa
Check your inbox for an official HostPapa breach notice and verify its sender before acting
Watch for phishing that uses your name, email, or phone number
Change your HostPapa account password and enable two-factor authentication
Contact HostPapa support to confirm whether your account was included
What the sources say 1
· Mastodon: “On October 21, 2026, we identified that an unauthorized party had accessed a data system HostPapa uses for internal reporting, beginning on or around October 15, 2026.” Source