Got a message about an outage or data breach: is it real?

As of 28 October 2026

Since 21 October there has been a major security problem in software used by many websites. Sites of companies and governments were temporarily hard to reach or down. No leak of customer data has been confirmed at this moment in the countries Veydor follows.

What is going around: emails in the name of your hosting company about a ‘required update’ or a ‘security problem’, with a link to log in. That link leads to a copied page.

Not seen yet, but what followed earlier incidents: messages saying ‘your data has been leaked’ with a link to ‘check’, and calls in the name of your bank or platform about a ‘safe wallet’. This block is updated when something changes.

Why these messages come

An incident in the news is an opportunity for scammers: everyone has heard about it, so a message about it feels logical. They use the name of the company that was in the news, or of your host, your bank, the government or your wallet. Sometimes they know your name or email address from an earlier leak; that says nothing about whether the message is real.

The signs you can see yourself

A link to log in or to ‘check’, ‘confirm’ or ‘secure’ your details.

Hurry. Within a few hours, or your account is blocked or you lose something.

Your words, a code or a payment. A request for your recovery phrase, your password, a code from a text, or an amount ‘for verification’.

A new place for your crypto. A ‘safe wallet’ or a ‘temporary address’ to send your coins to.

A phone call that follows the email, or a number to call.

One sign is enough to do nothing with the message.

How to check it yourself

Do not click on any link from the message. Type the company’s address yourself, or open the app already on your phone, and see there whether there is a notice; a real incident is on the company’s own site. Copy the text of the message and paste it into the field on veydor.xyz or into the chat with @Veydor_check_bot; Veydor says which known signs are in it and opens nothing. A link from the message can be checked the same way.

Already clicked or entered something?

Only clicked and entered nothing: close the page; probably nothing happened. Entered a password: change it right away through the real site, and everywhere you use the same password. Entered your recovery phrase: move what is still there to a new wallet with new words, created on a device you trust. Moved crypto to an address from the message: a transaction on the blockchain cannot be reversed; see scammed with crypto: what now?. Report it to the police and to your country’s official fraud-reporting service; where that is differs per country.