1. News
  2. Alerts
  3. Bunny · Security
AlertBunny · Security2 min read

Bunny CDN reports a security incident on its status page

Bunny CDN posted a security incident notice on its status page. If your site or videos run on Bunny, it is worth checking now what it means for you.

By the Dashline deskSource: Hacker News (100+ points)
Bunny CDN reports a security incident on its status page
Photo: Dsimic, CC BY-SA 4.0
Act this week
What happenedBunny CDN posted a security incident notice on its public status page.
Who is affectedAnyone who runs a website, app or video library that uses Bunny CDN, and their visitors.
What to do
  1. 1Read the notice and any updates at status.bunny.net.
  2. 2Ask your web developer or host whether your site uses Bunny.
  3. 3Treat emails about the incident with care and go to Bunny's site directly instead of clicking links.
  4. 4Change Bunny passwords and access keys if Bunny advises it.

Bunny CDN has posted a security incident notice on its public status page. The post drew 131 points on Hacker News, a sign that many technical readers are watching it. The notice does not make the cause or the impact clear yet, so there is no full picture to share.

What Bunny does

A CDN, short for content delivery network, keeps copies of a website's files on servers close to visitors. That helps pages, images and videos load faster. Many sites use one without their owners thinking about it much. Bunny is one such service.

Who it affects

The people most likely to care are anyone who runs a website, app or video library that uses Bunny, and the visitors to those sites. If you do not use Bunny, or your site does not, this notice is probably not about you. If you are not sure, your web developer or host can tell you quickly.

What is not known yet

The notice does not yet explain what went wrong, what was affected or whether customer data or accounts are involved. That means nobody outside Bunny can say how serious it is. Details may change as Bunny posts updates, so it is worth checking the page again rather than relying on a single reading.

What to do

The steps in the alert box above cover the basics. One point is worth repeating: incidents like this can prompt scam emails that pretend to come from the company. Go to Bunny's own site directly instead of clicking links in a message.

The takeaway

Check status.bunny.net, ask your developer whether your site uses Bunny, and wait for Bunny's guidance before changing anything.

More articles

You should really read these.

Next step

Let’s talk