Account hacked and someone dropped all my databases

Posted on June 1, 2021

It seems digitalocean is totally unsafe platform to use. Today morning I found none from my 5 databases that was there last night. It is clear someone dropped them. Either this is hacked or there is some error by digitalocean.

BE ALERT GUYS. I don’t found this platform to be trusted for your production applications. I am looking for another provider and will switch soon.

**DIGITALOCEAN SI TOTALLY UNSAFE and UNSECURE PLATFORM. **

This textbox defaults to using Markdown to format your answer.

You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

Bobby

June 1, 2021

Hi there,

In order to verify if someone accessed your DigitalOcean control panel, you can go to the Security section and see the logs of all activity of the account. That way you will be able to verify if it was indeed the account that was compromised. If this is the case, this is why it is always important to enable 2FA for your account.

Also was it a Managed database cluster that got deleted? Or were your databases stored on your Droplet?

With all Droplets, you have root access to the servers and it is up to you to keep the server secure. For example, using a firewall to lock down direct access to your database is crucial. And if you are using a CMS like WordPress it is important to keep it up to date as attackers could exploit the CMS and gain access to your databases as well.

Also as a general tip, it is always important to have backups for production.

Regards, Bobby