Act this weekWhat happenedBunny CDN posted a security incident notice on its public status page.
Who is affectedAnyone who runs a website, app or video library that uses Bunny CDN, and their visitors.
What to do- 1Read the notice and any updates at status.bunny.net.
- 2Ask your web developer or host whether your site uses Bunny.
- 3Treat emails about the incident with care and go to Bunny's site directly instead of clicking links.
- 4Change Bunny passwords and access keys if Bunny advises it.
Bunny CDN has posted a security incident notice on its public status page. The post drew 131 points on Hacker News, a sign that many technical readers are watching it. The notice does not make the cause or the impact clear yet, so there is no full picture to share.
What Bunny does
A CDN, short for content delivery network, keeps copies of a website's files on servers close to visitors. That helps pages, images and videos load faster. Many sites use one without their owners thinking about it much. Bunny is one such service.
Who it affects
The people most likely to care are anyone who runs a website, app or video library that uses Bunny, and the visitors to those sites. If you do not use Bunny, or your site does not, this notice is probably not about you. If you are not sure, your web developer or host can tell you quickly.
What is not known yet
The notice does not yet explain what went wrong, what was affected or whether customer data or accounts are involved. That means nobody outside Bunny can say how serious it is. Details may change as Bunny posts updates, so it is worth checking the page again rather than relying on a single reading.
What to do
The steps in the alert box above cover the basics. One point is worth repeating: incidents like this can prompt scam emails that pretend to come from the company. Go to Bunny's own site directly instead of clicking links in a message.
The takeawayCheck status.bunny.net, ask your developer whether your site uses Bunny, and wait for Bunny's guidance before changing anything.