Ransomware attack on ActiveCloud disrupts Belarusian businesses

# Ransomware attack on ActiveCloud disrupts Belarusian businesses

https://gcdradar.vercel.app/incidents/ransomware-attack-on-activecloud-disrupts-belarusian-busines · AIR-2026-1951 · live

- Lane: Breaches & attacks
- Severity: 3 (Confirmed exploitation): Confirmed real-world intrusion and extortion attempt against a cloud provider.
- Fix status: No fix needed
- First reported: 2026-11-13
- AI role: No AI role
- Products: ActiveCloud

## Summary

Hackers breached ActiveCloud and encrypted parts of its cloud infrastructure, causing multi-day service outages for customers. The company confirmed the intrusion and worked to restore affected systems.

## What to do

Verify cloud backups and review access controls.

## Latest updates

- 2026-11-13: Ransomware attack on Belarusian cloud firm disrupts businesses for days (https://therecord.media/belarus-cloud-provider-activecloud-ransomware-attack)

## Sources

- 2026-11-13 The Record: Ransomware attack on Belarusian cloud firm disrupts businesses for days https://therecord.media/belarus-cloud-provider-activecloud-ransomware-attack

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.