Rackspace Hosted Exchange service outage caused by security incident

Cloud computing company Rackspace has suffered a security breach that has resulted in a still ongoing outage of their Hosted Exchange environment.

The connectivity issues for Rackspace Hosted Exchange customers – mostly small to medium size businesses – started on Friday, with users experiencing errors when accessing the Outlook Web App and syncing their email clients.

“Since our last update, we have mobilized roughly 1000 support Rackers to reduce wait times and address ticket queues,” the company said on Sunday, then followed up with the decision to contact every Hosted Exchange customer by phone or email.

What caused the incident is unknown, but security researcher Kevin Beaumont has noticed that, a few days ago, the Shodan search engine was showing Rackspace’s Exchange clusters running an Exchange version from August 2022, which means that they did not have the patches for the ProxyNotShell vulnerabilities.

Whether or not the security incident happened due to the exploitation of these vulnerabilities, I think many Rackspace Hosted Exchange customers will end up not switching back after the outage has ended and are now worrying whether they will be able to recover their legacy email data from Rackspace.

“If you run Exchange in Hybrid mode or have on prem servers for management – which is extremely common for almost every Exchange Online customer – you still need to take action. The Microsoft blog says no action is required for Exchange Online. This is wordsmithing by Microsoft, and is wrong – those on prem Exchange Servers you forgot about and rely on still need fixing,” he warned, and offered advice on checking whether their servers have been compromised in the meantime.

Share this article on social media:

Subscribe to Our Newsletter!
Stay on top of cybersecurity risks, evolving threats and industry news.

The Latest Cybersecurity News

From major cyberattacks, newly discovered critical vulnerabilities to recommended best practices, read it here first:

Tell us about your needs.
Get an answer the same business day.

Tell us about your needs.
Get an answer the same business day.

Fill out the form below and get an answer from our experts within 1 business day.

Got an urgent request? Call us at 1-877-805-7475 or Book a meeting.

PCI-DSS

What happens next:

  • We reach out to learn about your objectives
  • We work together to define your project's scope
  • You get an all-inclusive, no engagement proposal

This field is for validation purposes and should be left unchanged.
Scroll to Top

BOOK A MEETING

Enter Your
Corporate Email

This site is registered on wpml.org as a development site.