Update: attack stopped – your files are safe – restart on Tuesday
- The attack has been stopped. The attacker's access has been blocked since approx. 14:30 CET today.
- Your files are safe. They have not been lost or damaged, and the attacker did not download any files.
- PowerFolder Cloud is expected to be available again from Tuesday, 10 November 2026.
What happened? Today an attacker had unauthorized access to part of our cloud systems for about one and a half hours (approx. 13:00 to 14:30 CET). This was made possible by a chain of several causes in parts of our own operating infrastructure. Our team detected the anomalies through our monitoring systems and responded immediately: cloud shut down, access blocked, affected credentials replaced. We have filed a criminal complaint and notified the data protection authority.
One precaution: We cannot rule out that user data (name, email address) and passwords in protected form were copied. That is why you will set a new password at your first sign-in after the restart, and all devices will sign in again. If you use your PowerFolder password elsewhere, change it there. We never ask for your password by email.
PowerFolder Server (on-premise): Self-hosted servers are not affected. The attack relied on conditions specific to our own operating infrastructure that do not exist in your installation. No action is required.
A big thank you to our team, who spotted and acted immediately – and to you for your patience.
Next update: Monday, 9 November 2026. Questions: contact form.