Stolen UpdraftCentral keys used to backdoor WordPress sites
TeamUpdraft says its site was breached on October 17-18, and attackers installed backdoor plugins for about 18 hours.
78
Product
UpdraftClone
- Mentions · 7d4
- Mentions · 30d4
- All mentions4
- First seenOct 19, 2026
- Last mentioned4d ago
Timeline
4 articles · newest firstTeamUpdraft breach exposed keys used to backdoor WordPress sites
Exposed data reportedly included password hashes, billing details, and keys for UpdraftCentral, UpdraftVault, and UpdraftClone.
74
Stolen UpdraftCentral keys used to backdoor WordPress sites
TeamUpdraft says a weekend breach exposed remote-management keys; Patchstack logged backdoor plugins on connected sites.
76
Stolen UpdraftCentral keys used to install malicious WordPress plugins
TeamUpdraft says its site was accessed October 17–18 and the database held UpdraftCentral, Vault, and Clone keys.
78
Appears with
- UpdraftPlusproduct · 4
- UpdraftVaultproduct · 4
- UpdraftCentralproduct · 4
- TeamUpdraftvendor · 4
- Nethembaorganization · 3
- Patchstackorganization · 2
- Wordfenceorganization · 1
- TeamUpdraftvictim · 1
- Nethembavictim · 1
- WordPressproduct · 1
- Information Commissioner's Officeorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.