---
title: "Data breach at TeamUpdraft"
description: "TeamUpdraft, the publisher of the UpdraftPlus and UpdraftCentral WordPress plugins, detected unauthorised access to its teamupdraft.com website over the weekend of 17-18 October 2026. It believes its customer database was accessed, containing customer and billing details, order history, password has"
canonical: https://inyourgeek.com/en/fuites-de-donnees/2026-10-19-teamupdraft
type: fuite-de-donnees
author: "Sébastien Soulier"
publisher: "InYourGeek"
language: en
datePublished: 2026-10-19
dateModified: 2026-10-19
---
# TeamUpdraft

Data breach — Moderate

TeamUpdraft, the publisher of the UpdraftPlus and UpdraftCentral WordPress plugins, detected unauthorised access to its teamupdraft.com website over the weekend of 17-18 October 2026. It believes its customer database was accessed, containing customer and billing details, order history, password hashes, two-factor authentication settings and connection keys for the UpdraftCentral, UpdraftVault and UpdraftClone services. The company states it does not store payment details, and that it closed the access route, signed out all accounts and replaced the keys and credentials that could have been affected. According to Patchstack, websites connected through UpdraftCentral have been targeted with malicious plugins since 18 October 2026. The number of people affected has not been disclosed.

Stolen UpdraftCentral connection keys allow a third party to send commands to the linked WordPress sites, for example to install a malicious plugin or create administrator accounts.

| Fact | Value |
| --- | --- |
| Disclosed on | October 19, 2026 |
| Incident dated | October 17, 2026 |
| Sector | Digital services |
| Country | International or undetermined |
| Cause | Undisclosed |
| Severity | Moderate |
| Status | Confirmed |

## Exposed data

- Order history
- Password (hashed)
- Connection data (IP, logs)
- Other personal data

## What you can do

- Change that password — and everywhere you reused it. That is how a leak spreads to your other accounts.
- Turn on two-factor authentication on the affected accounts: a stolen password is then no longer enough.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

## Sources

- [Stolen UpdraftCentral keys used to backdoor WordPress sites](https://www.bleepingcomputer.com/news/security/stolen-updraftcentral-keys-used-to-backdoor-wordpress-sites/) — Bleeping Computer
- [UpdraftCentral key compromise and WordPress backdoors](https://patchstack.com/articles/updraftcentral-key-compromise-wordpress-backdoors/) — Patchstack

_Entry built from the cited sources after a corroboration check, then reviewed before publication._

---

Equivalent HTML page : https://inyourgeek.com/en/fuites-de-donnees/2026-10-19-teamupdraft
Published by InYourGeek — https://inyourgeek.com/en/a-propos
Method and safeguards : https://inyourgeek.com/en/methode
Full register : https://inyourgeek.com/en/fuites-de-donnees