BGP.Exchange’s Public Security Incident Statement

Field notes

The statement is organized as an operational timeline: infrastructure recovery, domain control, investigation scope, member information, and password handling. At 2:00 AM AEST, the replacement Sydney hypervisor had been installed and was undergoing updates, patching, and hardening before workloads could return. The operator names the application, database, email, and former Sydney hypervisor as affected systems while reporting no evidence of access to route servers or other global points of presence.