# bunny.net: Security update regarding one of our infrastructure providers

> bunny.net reports a security problem with one of its infrastructure providers. The problem affects CDN managed TLS certificates for custom domains. bunny.net has reissued all managed certificates with new private keys and revoked the previous certificates. The status is monitoring.

- Provider: [bunny.net](https://outages.live/bunny.md)
- Type: Incident
- State: monitoring
- Worst impact: Operational
- Started: 2026-10-28 11:40 UTC
- Components: CDN
- Official update: https://stspg.io/lx2j3r722p6n

## Updates from bunny.net

### monitoring, 2026-11-01 08:39 UTC

We've completed the reissuance of managed TLS certificates for custom domains. All managed certificates have been reissued with new private keys, and the previous certificates have been revoked. No action is required from customers using managed certificates. If you manage your own TLS certificates and haven't done so yet, we continue to recommend revoking and reissuing them with new private keys as a precaution. - What we're doing to prevent this in the future We have stopped using the affected provider while their investigation continues. We recognise that we can't rely on any single layer of security, so we're taking additional steps to reduce the potential impact of similar incidents that could occur in the future. We're reducing what each server holds: we're changing how configurations are distributed so that each PoP only receives the configuration and TLS certificates for the sites it is actively serving, limiting the data stored on any single server. Neither our investigation n