# Bunny.net: Incident updated: Security update regarding one of our infrastructure providers

> Incident updated: Security update regarding one of our infrastructure providers. Detected 2026-11-09 by Rewindex: what changed on Bunny.net’s status page, with the before/after diff.

Canonical: https://rewindex.com/change/rcd2127c61b271c
Last updated: 2026-11-09T20:33:53Z

**Summary:** _summary pending_
- Kind: Incident update · Label: Normal progress (rule)
- Changed: 2026-11-09 20:33 UTC · Detected: 2026-11-09 20:33 UTC
- [Source: https://status.bunny.net/incidents/p6gf1by9kr7m](https://status.bunny.net/incidents/p6gf1by9kr7m)
- [Company: Bunny.net](https://rewindex.com/company/bunny-net.md)
- Versions: before incident\_version:81/p6gf1by9kr7m@232a4775a4a4 → after incident\_version:81/p6gf1by9kr7m@da5a34c735e9
- Change 5 of 5 for this incident

## Downplayed?

Vendor rated this none; a Hacker News thread about it drew 224 points and 45 comments. [Bunny CDN Security Incident](https://news.ycombinator.com/item?id=50308697)

_This is an automated signal, not a finding. It compares the vendor’s own impact rating with public Hacker News activity (points, comments in the first hour, distinct commenters, first-hand symptom reports). HN users skew technical, so the impact on any one customer may differ. Method: [About: Hacker News signals](https://rewindex.com/about#signals)_
Incident page (full timeline): [Security update regarding one of our infrastructure providers](https://rewindex.com/company/bunny-net/incidents/p6gf1by9kr7m.md)
## What changed

**1. Changed: Status**

```diff
- monitoring
+ resolved
```

**2. Added: Resolved time**

```diff
+ 2026-11-09 20:22 UTC
```

**3. Added: Update** (resolved) · 2026-11-09 20:22 UTC

```diff
+ All remediation work on our side is complete. Every certificate we manage through Let's Encrypt for the affected hostnames has been reissued, and the previous certificates have been revoked and published in Let's Encrypt's Certificate Revocation Lists (CRLs). If you uploaded your own custom certificate: as mentioned in our earlier updates, please make sure you have replaced it with a new certificate and private key, and asked your certificate authority to revoke the old one. We can't do this for you. Until you do, the old certificate and its private key should be treated as compromised. We are closing this incident because no further action is required on our side. Our provider's investigation into the root cause is still ongoing. When we receive their final report, we will email affected customers directly with a summary of the findings. Thank you for your patience while we worked through this.
```

## History of this incident

| When (UTC) | Change | Label |
| --- | --- | --- |
| 2026-10-29 18:43 UTC | [Incident updated: Security update regarding one of our infrastructure providers](https://rewindex.com/change/r5a1e486088127b.md) | Normal progress |
| 2026-10-29 20:03 UTC | [Incident silently edited: Security update regarding one of our infrastructure providers](https://rewindex.com/change/r1feb9b6617c6ae.md) | Wording only |
| 2026-10-31 12:53 UTC | [Incident updated: Security update regarding one of our infrastructure providers](https://rewindex.com/change/r212be59954eb61.md) | Normal progress |
| 2026-11-04 13:43 UTC | [Incident updated: Security update regarding one of our infrastructure providers](https://rewindex.com/change/r5583ba72bcea72.md) | Normal progress |
| 2026-11-09 20:33 UTC | Incident updated: Security update regarding one of our infrastructure providers (this change) | Normal progress |

Previous: [change](https://rewindex.com/change/r5583ba72bcea72.md) · All Bunny.net changes: [timeline](https://rewindex.com/company/bunny-net/changes.md)
_Diff excerpts are shown on normalized text: dates, counters and tokens appear as ‹date›, ‹count›, ‹tok›; noise-only edits are hidden. Rewindex shows the changed passages, not a copy of the page._

## Cite this

Incident updated: Security update regarding one of our infrastructure providers on Bunny.net’s status page, changed 2026-11-09 20:33 UTC (change 5 of 5).

- Canonical URL: https://rewindex.com/change/rcd2127c61b271c
- Citation: Bunny.net, “Incident updated: Security update regarding one of our infrastructure providers” (2026-11-09 20:33 UTC). Archived by Rewindex: https://rewindex.com/change/rcd2127c61b271c (CC BY 4.0).
- Markdown link: `[Bunny.net: Incident updated: Security update regarding one of our infrastructure providers (2026-11-09)](https://rewindex.com/change/rcd2127c61b271c)`


---
Canonical: https://rewindex.com/change/rcd2127c61b271c · Markdown: https://rewindex.com/change/rcd2127c61b271c.md · JSON: https://rewindex.com/api/v1/changes/rcd2127c61b271c · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-11T04:58:55.500Z