Home / Incidents / Data breach
Hijacked cPGuard update backdoors nearly 3,000 Linux servers
A poisoned update from the security tool's own update channel installed a backdoor and stole credentials from about 2,950 servers.
- Organisation
- OpsShield (cPGuard)
- Disclosed
- 3 November 2026
- Affected
- Not stated
- Data
- Server credentials, password hashes
- Attacker
- Unknown
- Severity
- major
- Region
- Global
- Source
- SecurityWeek ↗
Cite this
Nuffield Consulting, “Hijacked cPGuard update backdoors nearly 3,000 Linux servers”, The Daily Tech Wire outage & breach log, 3 Nov 2026. https://techwire.nuffieldconsulting.com/incidents/2026-11-03-opsshield-cpguard-breach/ (retrieved 15 Nov 2026).
This entry summarises public reporting. Please also cite the original source: SecurityWeek, https://www.securityweek.com/malicious-cpguard-updates-served-in-opsshield-supply-chain-attack/.
Related incidents
- 11 Nov 2026Baltic SMS provider left 125M messages exposedCSCTelecom · breach · Unknown · 125M records
- 9 Nov 2026Nitori warns 37.62m customer records may have leakedNitori · breach · Unknown · 37.6M records
- 9 Nov 2026Frontline Education breach total rises to over 3 millionFrontline Education · breach · Unknown · 3.1M records
- 7 Nov 2026Crédit Mutuel Arkéa hit via a service providerCrédit Mutuel Arkéa · breach · Unknown
- 6 Nov 2026Chainalysis says credentials and live tokens for all customers were exposedChainalysis · breach · Unknown