October 2026 Security Incident

On 29 October 2026, we identified a security incident that resulted in malicious JavaScript code being served on at least one DebugBear customer website and a 5-day outage of our service.

What happened

An unauthorised third party gained access to our domain registrar account. This gave them control of the content served on our website and allowed them to serve malicious code instead of our performance monitoring script. We believe the attacker's script was served for approximately two hours.

We assess that this was a targeted and financially motivated attack on one of our customer websites.

Our response to the incident

We engaged outside incident response specalists to bring our service back online safely and assess the impact on our customers. We have provided additional information to our customers over email.

While we see no indication that DebugBear data was the target of this attack, we have reset all user sessions, API keys, and other access tokens as a precautionary measure.

Following the incident we have moved to a different domain registrar. We have also added subresource integrity checks to our RUM script to provide additional security.

Further information

Please reach out if you have any further questions following this incident.