Datto

We are aware of a problem where Datto AV is incorrectly flagging newly created .pdf files as PHISH/PDF, causing the files to be quarantined. The Kaseya R&D Team is currently investigating this issue. In the meantime our Support team has been supplied with a workaround and can assist you with implementing it. If you would like to have the workaround applied, please create a ticket with our Support team or contact them at 833-863-2237. To work around this issue: Adding exclusions for the affected folders and files. Then restoring the affected files. Subscribe to the Kaseya Status Page for up-to-date information at https://status.kaseya.com/

Two critical vulnerabilities were disclosed in third-party PHP libraries that allow unauthenticated remote code execution. Kaseya security teams are assessing all Kaseya systems and products and applying fixes as they become available. This page is the source of truth for Kaseya status and guidance. Product Status: All products: Customer action: none Kaseya corporate infrastructure: Customer action: none Third-party components in Kaseya products: Customer action: none

A third party vendor, ConnectWise, recently reported attempts of unauthorized access associated with the ConnectWise Cloud Backup environment. ConnectWise has initiated their incident response procedures, and have applied containment measures as they continue to investigate. At this time, according to ConnectWise there is no indication that ConnectWise partner backup data has been accessed. All additional updates related to this incident can be found on the ConnectWise Status Page at status.connectwise.com. As part of our ongoing security monitoring efforts, the Kaseya Security Operations Center deployed additional detection measures on October 16, 2026, targeting publicly disclosed indicators of compromise. Activity matching these indicators is automatically designated as critical severity and promptly reviewed by our security analysts. The Kaseya product team has also deployed a fortify action within SaaS Alerts and KSIEM environments to help mitigate this risk further. Please follow the steps below to apply the fortify action: Action Name: Disable ConnectWise Cloud Backup and Cloud Management apps Steps to Deploy within SaaS Alerts and KSIEM portal: Within the left menu, under "Modules", select Fortify → Actions, then perform the following: 1. Set Select Product to Microsoft. 2. Set Select Organization to the customer's org (or leave it on All), and leave Select Actions on All. 3. Click Show Actions. 4. Search for Disable ConnectWise Cloud Backup and Cloud Management apps in the search box. 5. Under the action's buttons, click the wand icon labelled Apply. If you feel you have been compromised due to this issue, please contact Kaseya support.

Microsoft Graph API migration has been completed across all Datto SaaS Protection environments, including customers utilizing in-place archive configurations. No further migration activities are expected to impact backup operations. Some customers may continue to experience backup performance degradation while our engineering teams work to restore backup success rates to pre-migration levels. Multiple fixes and optimizations are being actively deployed across V2 and V3 environments, including improvements to Microsoft Graph API error handling and overall backup processing reliability. Teams continue to monitor the impact of each change as it is released. Current Backup Cadence: V2 environments: All Microsoft 365 services continue to back up three times per day. V3 environments: Exchange continues to back up three times per day. SharePoint, OneDrive, and Teams remain on a reduced cadence of one backup per day while optimization efforts continue to maintain high backup success rates and mitigate Microsoft service throttling. We do not currently have a fixed resolution date, as improvements are being delivered through ongoing remediation efforts rather than a single release. While performance is expected to continue improving, some customers may experience intermittent backup performance issues until all identified issues have been addressed. Based on current progress, we are cautiously optimistic that the remaining issues will be resolved over the coming days to weeks. We will continue providing updates as fixes are confirmed. Customers who have not completed the required Microsoft 365 tenant reauthorization should follow the instructions here: https://saasprotection.datto.com/help/M365/Content/Troubleshooting/General/ews-to-graph.html Should you have any additional questions or require assistance, please contact our support team at: https://helpdesk.kaseya.com/hc/en-gb#/contact Subscribe to the Kaseya Status Page for up-to-date information at: https://status.kaseya.com/

We are aware of a problem where Datto AV is incorrectly flagging newly created .pdf files as PHISH/PDF, causing the files to be quarantined. The Kaseya R&D Team is currently investigating this issue. In the meantime our Support team has been supplied with a workaround and can assist you with implementing it. If you would like to have the workaround applied, please create a ticket with our Support team or contact them at 833-863-2237. To work around this issue: Adding exclusions for the affected folders and files. Then restoring the affected files. Subscribe to the Kaseya Status Page for up-to-date information at https://status.kaseya.com/

A fix has been implemented and we are monitoring the results.

We are aware of a problem where Datto SaaS Protection customers hosted on 'aue1-bfyii-1533' are experiencing a disruption to SaaS Protection services and may receive a '500 Internal Server Error' when attempting to access their accounts. The Kaseya Engineering Team is actively investigating. Should you need any additional questions or require assistance, please contact our support team at https://helpdesk.kaseya.com/hc/en-gb#/contact Subscribe to the Kaseya Status Page for up-to-date information at https://status.kaseya.com/

We are aware of a problem where customers hosted on pod 'aue2-saas-p2' are experiencing backup performance degradation affecting M365 and Google Workspace services. The Kaseya Engineering Team has identified the issue and are actively working to resolve it. Should you have any additional questions or require assistance, please contact our support team at https://helpdesk.kaseya.com/hc/en-gb#/contact Subscribe to the Kaseya Status Page for up-to-date information at https://status.kaseya.com/

We are aware of a problem where Node use1-dtc-server-118.datto.com is inaccessible preventing access to Backups/ Screenshots/ Restores. The Kaseya Engineering Team is investigating the situation Should you need any additional questions or require assistance, please contact our support team at https://helpdesk.kaseya.com/hc/en-gb#/contact Subscribe to the Kaseya Status Page for up-to-date information at https://status.kaseya.com/

We are aware of a issue affecting device filters that combine negative query conditions, such as “does not contain,” with an embedded AND/OR operator within the filter criteria. A change with how these conditions are evaluated was made to correct these queries however it was not communicated as expected and may cause some existing filters to return different results than previously anticipated. We are considering reverting this change, if you believe your filters may be affected, please contact Support for assistance reviewing your configuration and guidance on next steps.

We are aware of a problem where Datto SaaS Protection customers hosted on 'gbe2-bfyii-1555' are experiencing a disruption to SaaS Protection services. The Kaseya Engineering Team is currently investigating. Subscribe to the Kaseya Status Page for up-to-date information at https://status.kaseya.com/

Two critical vulnerabilities were disclosed in third-party PHP libraries that allow unauthenticated remote code execution. Kaseya security teams are assessing all Kaseya systems and products and applying fixes as they become available. This page is the source of truth for Kaseya status and guidance. Product Status: All products: Customer action: none Kaseya corporate infrastructure: Customer action: none Third-party components in Kaseya products: Customer action: none

We are aware of a problem where RocketCyber partners, in the EU region, are experiencing web pages loading slow or not at all, within the platform. The Kaseya Engineering Team is currently investigating the issue. Should you need any additional questions or require assistance, please contact our support team at https://helpdesk.kaseya.com/hc/en-gb#/contact Subscribe to the Kaseya Status Page for up-to-date information at https://status.kaseya.com/

A third party vendor, ConnectWise, recently reported attempts of unauthorized access associated with the ConnectWise Cloud Backup environment. ConnectWise has initiated their incident response procedures, and have applied containment measures as they continue to investigate. At this time, according to ConnectWise there is no indication that ConnectWise partner backup data has been accessed. All additional updates related to this incident can be found on the ConnectWise Status Page at status.connectwise.com. As part of our ongoing security monitoring efforts, the Kaseya Security Operations Center deployed additional detection measures on October 16, 2026, targeting publicly disclosed indicators of compromise. Activity matching these indicators is automatically designated as critical severity and promptly reviewed by our security analysts. The Kaseya product team has also deployed a fortify action within SaaS Alerts and KSIEM environments to help mitigate this risk further. Please follow the steps below to apply the fortify action: Action Name: Disable ConnectWise Cloud Backup and Cloud Management apps Steps to Deploy within SaaS Alerts and KSIEM portal: Within the left menu, under "Modules", select Fortify → Actions, then perform the following: 1. Set Select Product to Microsoft. 2. Set Select Organization to the customer's org (or leave it on All), and leave Select Actions on All. 3. Click Show Actions. 4. Search for Disable ConnectWise Cloud Backup and Cloud Management apps in the search box. 5. Under the action's buttons, click the wand icon labelled Apply. If you feel you have been compromised due to this issue, please contact Kaseya support.

We are aware of an issue where some Datto SaaS Protection Partners are unable to access customer accounts hosted on the isw1-bfyii-1134 node The Kaseya Engineering Team is investigating the issue. If you have any questions or require assistance, please contact our support team at https://helpdesk.kaseya.com/hc/en-gb#/contact Subscribe to the Kaseya Status Page for the latest updates: https://status.kaseya.com/

We are aware of a problem where agents are unable to connect and portal users are unable to login in the AU region. The Kaseya Engineering Team is currently investigating this issue. Should you need any additional questions or require assistance, please contact our support team at https://helpdesk.kaseya.com/hc/en-gb#/contact Subscribe to the Kaseya Status Page for up-to-date information at https://status.kaseya.com/

We are aware of a problem where Datto Endpoint Backup for PC users hosted on Cloud Siris 296721 in the US East region can experience degraded backup performance. The Kaseya R&D Team is currently investigating the issue and working towards a resolution. Should you need any additional questions or require assistance, please contact our support team at https://helpdesk.kaseya.com/hc/en-gb#/contact Subscribe to the Kaseya Status Page for up-to-date information at https://status.kaseya.com/

We are aware of a problem affecting the connectivity of Datto RMM macOS agents. At this time, we have identified the following behaviors: - Newly installed macOS agent installations are unable to establish connectivity. - Existing macOS agents, that are currently in production environments, should remain online; however, our investigation is ongoing to determine whether additional scenarios may cause agents to go offline. - Initial testing shows that if a macOS device is restarted, the agent may not restart, causing the device to be offline in Datto RMM. Our teams are actively investigating the root cause with Apple and working to develop a resolution. We will provide additional updates as more information becomes available. Until further notice, we recommend avoiding unnecessary reboots of managed macOS devices and postponing new macOS agent deployments where possible. We apologize for the inconvenience and appreciate your patience while we work to resolve this issue. Should you need any additional questions or require assistance, please contact our support team at https://helpdesk.kaseya.com/hc/en-gb#/contact Subscribe to the Kaseya Status Page for up-to-date information at https://status.kaseya.com/

We are aware of a problem where Datto SaaS Protection customers hosted on V2 node 'aue1-bfyii-2213' are experiencing a disruption to SaaS Protection services. The Kaseya Engineering Team is currently investigating. Subscribe to the Kaseya Status Page for up-to-date information at https://status.kaseya.com/

We are aware of a problem in both BMS and Vorex where users are getting errors when generating batch invoices, using billing automations to send invoices, and issues using the "Post All" button when in the "Billing Review" stage. The Kaseya Engineering Team is investigating the issue. Should you need any additional questions or require assistance, please contact our support team at https://helpdesk.kaseya.com/hc/en-gb#/contact Subscribe to the Kaseya Status Page for up-to-date information at https://status.kaseya.com/

We are aware of a problem where users can experience extended latency when navigating throughout the Kaseya Quote Manager Platform. The Kaseya Engineering Team are investigating the issue. Should you need any additional questions or require assistance, please contact our support team at https://helpdesk.kaseya.com/hc/en-gb#/contact Subscribe to the Kaseya Status Page for up-to-date information at https://status.kaseya.com/

Microsoft Graph API migration has been completed across all Datto SaaS Protection environments, including customers utilizing in-place archive configurations. No further migration activities are expected to impact backup operations. Some customers may continue to experience backup performance degradation while our engineering teams work to restore backup success rates to pre-migration levels. Multiple fixes and optimizations are being actively deployed across V2 and V3 environments, including improvements to Microsoft Graph API error handling and overall backup processing reliability. Teams continue to monitor the impact of each change as it is released. Current Backup Cadence: V2 environments: All Microsoft 365 services continue to back up three times per day. V3 environments: Exchange continues to back up three times per day. SharePoint, OneDrive, and Teams remain on a reduced cadence of one backup per day while optimization efforts continue to maintain high backup success rates and mitigate Microsoft service throttling. We do not currently have a fixed resolution date, as improvements are being delivered through ongoing remediation efforts rather than a single release. While performance is expected to continue improving, some customers may experience intermittent backup performance issues until all identified issues have been addressed. Based on current progress, we are cautiously optimistic that the remaining issues will be resolved over the coming days to weeks. We will continue providing updates as fixes are confirmed. Customers who have not completed the required Microsoft 365 tenant reauthorization should follow the instructions here: https://saasprotection.datto.com/help/M365/Content/Troubleshooting/General/ews-to-graph.html Should you have any additional questions or require assistance, please contact our support team at: https://helpdesk.kaseya.com/hc/en-gb#/contact Subscribe to the Kaseya Status Page for up-to-date information at: https://status.kaseya.com/

We are currently experiencing service disruption for the below mentioned server, where administrators may be unable to login to UI. Our team is actively working to restore functionality at this time. We apologize for any inconvenience. - Cloud Operations Team

We are aware of a problem where Kaseya Quote Manager users get a 504 Azure Front Door error, and potential slowness if able to access KQM. The Kaseya Engineering Team is currently investigating the issue. Should you need any additional questions or require assistance, please contact our support team at https://helpdesk.kaseya.com/hc/en-gb#/contact Subscribe to the Kaseya Status Page for up-to-date information at https://status.kaseya.com/