DDOS attack in a single data center

Incident Report for BigCommerce

Resolved

This incident has been resolved.
Posted Mar 01, 2017 - 13:17 CST

Monitoring

All stores except one are back online. We are working with our DDOS mitigation provider to put in better detection and proactive attack mitigation. We will continue monitoring with our DDOS mitigation provider to ensure the attack vectors have been closed. Sorry for the interruption. Our defenses should have prevented this and did not, which we will be investigating with our provider to prevent recurrence.
Posted Mar 01, 2017 - 12:29 CST

Update

We are currently mitigating a 3rd DDOS attack. Most stores are back online but there is a subset of stores still offline until we can completely filter the attack. We are working with our DDOS mitigation provider to make that happen as soon as possible and will be proactively putting all networks behind a special rule set to prevent the attacks.
Posted Mar 01, 2017 - 12:09 CST

Update

We are seeing a second attack in the same datacenter as the previous one.
We are actively working to mitigate these attacks and will provide more updates soon.
Posted Mar 01, 2017 - 12:03 CST

Update

Access for the majority of stores should be restored.
There is a small subset of stores still unavailable as we work to filter the malicious traffic.
Posted Mar 01, 2017 - 11:49 CST

Identified

BigCommerce has identified a DDOS attack targeted at a single data center. We are working with our network provider to mitigate the attack. At the time, we are seeing intermittent slow responses and unavailability. We hope to have this fixed shortly.
Posted Mar 01, 2017 - 11:45 CST
This incident affected: API & Webhooks, Control Panel, and Storefront.