We identified that an unauthorized party accessed a data system HostPapa uses for internal reporting, beginning on or around October 15, 2026. An unauthorized party had access to a list of HostPapa customer accounts that include names, company names, email addresses, phone numbers, city, country and account status. Based on our investigation so far, the customer information downloaded in bulk in this incident does not include account passwords or full payment card numbers.

We've removed the access, secured the affected systems and are investigating with an independent forensic firm. We're emailing affected customers directly.

Service status: Your HostPapa website, email, server, and associated services have not been impacted.

What you should do now: Be cautious with unexpected emails, texts, calls or invoices about your HostPapa account. Don't click links in them; type https://hostpapa.com into your browser instead.

Watch for suspicious messages: We'll never ask for your password, two-factor codes or full card number by email, text, chat or phone.