Indian HostDzire Suffers Ransomware Attack, Customer Data Lost
Indian VPS provider HostDzire has suffered a ransomware attack affecting multiple VMware ESXi virtualization nodes.
The attack resulted in the encryption of virtual disks on the affected servers, leading to permanent loss of customer data that cannot be recovered. The company has shut down the relevant nodes and is rebuilding the system from scratch. All VMware nodes in India and some nodes in the Netherlands and the United States were affected, while KVM nodes were not impacted. The incident is suspected to be related to recently disclosed VMware vulnerabilities.
This incident marks a ransomware attack on the infrastructure of a hosting service provider, resulting in irreversible loss of customer data. Affected users are facing business interruptions and data reconstruction challenges, while the service provider is shifting to a new security architecture to rebuild the nodes.
Source: Public Information
ABAB AI Insight
As a low-cost VPS provider in India, HostDzire relies on VMware virtualization. The attack occurred around 02:00 UTC, and the team attempted to contain the spread by forcibly powering down via IPMI, but encryption had already been completed, and there were no backups for recovery.
In terms of capital and operational pathways, low-cost operations often come with insufficient security investments, and the exploitation of vulnerability windows directly led to total data loss. The attackers targeted the vulnerable virtualization layer to maximize damage and potential ransom.
Similar to previous large-scale ransomware cases targeting ESXi, current small and medium-sized hosting providers are still lagging in security maturity compared to attack methods.
This essentially represents a technological replacement: traditional virtualization security assumptions are shattered by vulnerabilities, transforming single-point infrastructure failures into irreversible losses for customers.
ABAB News · Cognitive Laws
Cheap VPS often pays the price for data integrity.
No offline backups mean putting all eggs in the attacker's basket.
Rebuilding nodes is easy, but rebuilding customer trust is extremely difficult.