{
"vendor": "Datto",
"slug": "datto",
"platform": "statuspage",
"status_url": "https://status.datto.com",
"last_checked": "2026-09-16T12:28:20Z",
"last_state": "degraded",
"history_backfilled": true,
"first_watched": "2026-09-04T07:06:16Z",
"incidents": [
{
"body": "Scheduled maintenance is currently in progress. We will provide updates as necessary.",
"first_seen": "2026-09-16T12:28:20Z",
"impact": "maintenance",
"last_seen": "2026-09-16T12:28:20Z",
"started_at": "2026-09-16T08:00:00.000-04:00",
"state": "maintenance",
"title": "Scheduled Maintenance \u2013 Cloud Target Appliance Upgrades",
"updated_at": "2026-09-16T08:00:11.792-04:00",
"url": "https://stspg.io/t0hn5y267zv2"
},
{
"body": "Scheduled maintenance is currently in progress. We will provide updates as necessary.",
"first_seen": "2026-09-16T12:28:20Z",
"impact": "maintenance",
"last_seen": "2026-09-16T12:28:20Z",
"started_at": "2026-09-16T07:30:00.000-04:00",
"state": "maintenance",
"title": "Autotask PSA - EU1, DE1 - Maintenance Notice",
"updated_at": "2026-09-16T07:30:08.826-04:00",
"url": "https://stspg.io/lq62177j9dqy"
},
{
"body": "We continue to monitor the status of the Salesforce service disruption and its effects on our services. \n\nThe Kaseya Store appears to have recovered, however, some KaseyaOne functionalities are still impacted by the issue.",
"first_seen": "2026-09-16T12:28:20Z",
"impact": "major",
"last_seen": "2026-09-16T12:28:20Z",
"started_at": "2026-09-16T05:06:55.280-04:00",
"state": "identified",
"title": "[KaseyaOne & Kaseya Store] Salesforce Global Service Disrution Impacting KaseyaOne and Kaseya Store Services",
"updated_at": "2026-09-16T06:31:29.382-04:00",
"url": "https://stspg.io/sk59dcx99dnr"
},
{
"body": "This incident has been resolved.",
"first_seen": "2026-09-16T12:28:20Z",
"impact": "major",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-09-15T11:38:02.721-04:00",
"resolved_inferred": false,
"started_at": "2026-09-15T09:02:47.612-04:00",
"state": "resolved",
"title": "Datto BCDR - Server3188 (Canada Region) - Cloud Operations Service Impact",
"updated_at": "2026-09-15T11:38:02.736-04:00",
"url": "https://stspg.io/27d7n1gr04g8"
},
{
"body": "Scheduled maintenance is currently in progress. We will provide updates as necessary.",
"first_seen": "2026-09-15T12:28:18Z",
"impact": "maintenance",
"last_seen": "2026-09-15T12:28:18Z",
"resolved_at": "2026-09-16T12:28:20Z",
"resolved_inferred": true,
"started_at": "2026-09-15T08:00:00.000-04:00",
"state": "maintenance",
"title": "Scheduled Maintenance \u2013 Cloud Target Appliance Upgrades",
"updated_at": "2026-09-15T08:00:10.141-04:00",
"url": "https://stspg.io/zynln2bsgkcq"
},
{
"body": "Scheduled maintenance is currently in progress. We will provide updates as necessary.",
"first_seen": "2026-09-15T12:28:18Z",
"impact": "maintenance",
"last_seen": "2026-09-15T12:28:18Z",
"resolved_at": "2026-09-16T12:28:20Z",
"resolved_inferred": true,
"started_at": "2026-09-15T07:30:00.000-04:00",
"state": "maintenance",
"title": "Autotask PSA - EU1, DE1 - Maintenance Notice",
"updated_at": "2026-09-15T07:30:07.298-04:00",
"url": "https://stspg.io/bq3knpzv7vf2"
},
{
"body": "This incident has been resolved.",
"first_seen": "2026-09-15T12:28:18Z",
"impact": "critical",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-09-14T15:58:54.391-04:00",
"resolved_inferred": false,
"started_at": "2026-09-14T12:53:09.000-04:00",
"state": "resolved",
"title": "Spanning - Canada and Asia-Pacific Regions - CA/AP-based Spanning Customers Unable To Login",
"updated_at": "2026-09-14T15:58:54.411-04:00",
"url": "https://stspg.io/s9ztd54p50qp"
},
{
"body": "This incident has been resolved.",
"first_seen": "2026-09-15T12:28:18Z",
"impact": "critical",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-09-14T14:47:41.323-04:00",
"resolved_inferred": false,
"started_at": "2026-09-14T11:05:21.000-04:00",
"state": "resolved",
"title": "Datto Workplace - US Region - US-based users are currently unable to authenticate to US-hosted cells",
"updated_at": "2026-09-14T14:47:41.341-04:00",
"url": "https://stspg.io/8rd0h09z7p4h"
},
{
"body": "This incident has been resolved.",
"first_seen": "2026-09-15T12:28:18Z",
"impact": "major",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-09-14T10:03:23.073-04:00",
"resolved_inferred": false,
"started_at": "2026-09-14T08:56:07.000-04:00",
"state": "resolved",
"title": "Datto Networking - Network Manager - Datto Secure Edge (SASE) administrators unable to create Fabric Tunnels",
"updated_at": "2026-09-14T10:03:23.090-04:00",
"url": "https://stspg.io/t9bdnyc6fykn"
},
{
"body": "This incident has been resolved.",
"first_seen": "2026-09-15T12:28:18Z",
"impact": "critical",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-09-14T13:53:12.496-04:00",
"resolved_inferred": false,
"started_at": "2026-09-14T08:46:36.601-04:00",
"state": "resolved",
"title": "Datto SaaS Protection - SaaS Protection Status Page in Datto Partner Portal Not Loading Customer Details",
"updated_at": "2026-09-14T13:53:12.512-04:00",
"url": "https://stspg.io/ynykqsfhg3xx"
},
{
"body": "Scheduled maintenance is currently in progress. We will provide updates as necessary.",
"first_seen": "2026-09-14T12:29:13Z",
"impact": "maintenance",
"last_seen": "2026-09-14T12:29:13Z",
"resolved_at": "2026-09-15T12:28:18Z",
"resolved_inferred": true,
"started_at": "2026-09-14T07:30:00.000-04:00",
"state": "maintenance",
"title": "Autotask PSA - EU1, DE1, - Maintenance Notice",
"updated_at": "2026-09-14T07:30:08.018-04:00",
"url": "https://stspg.io/mqbpbykcpb0g"
},
{
"body": "The system finished processing the remaining items in the queue, and the Incoming Email Processing is currently creating designated items in real time.\n\nThis incident is resolved.",
"first_seen": "2026-09-14T12:29:13Z",
"impact": "major",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-09-14T07:57:33.609-04:00",
"resolved_inferred": false,
"started_at": "2026-09-14T05:21:29.781-04:00",
"state": "resolved",
"title": "Autotask PSA - Inbound Email Processing - Inbound emails are not being processed and related items are not being created",
"updated_at": "2026-09-14T07:57:33.629-04:00",
"url": "https://stspg.io/g17q3qmkz344"
},
{
"body": "Scheduled maintenance is currently in progress. We will provide updates as necessary.",
"first_seen": "2026-09-13T12:30:53Z",
"impact": "maintenance",
"last_seen": "2026-09-13T12:30:53Z",
"resolved_at": "2026-09-14T12:29:13Z",
"resolved_inferred": true,
"started_at": "2026-09-13T08:00:00.000-04:00",
"state": "maintenance",
"title": "Autotask PSA - EU1, DE1 - Maintenance Notice",
"updated_at": "2026-09-13T08:00:10.607-04:00",
"url": "https://stspg.io/9c0ncgh18w8l"
},
{
"body": "Scheduled maintenance is currently in progress. We will provide updates as necessary.",
"first_seen": "2026-09-12T12:30:15Z",
"impact": "maintenance",
"last_seen": "2026-09-12T12:30:15Z",
"resolved_at": "2026-09-13T12:30:53Z",
"resolved_inferred": true,
"started_at": "2026-09-12T07:00:00.000-04:00",
"state": "maintenance",
"title": "Upcoming Security Enhancement for Your VSA Environment",
"updated_at": "2026-09-12T07:00:12.808-04:00",
"url": "https://stspg.io/1f96tqqgzcct"
},
{
"body": "Scheduled maintenance is currently in progress. We will provide updates as necessary.",
"first_seen": "2026-09-11T12:29:42Z",
"impact": "maintenance",
"last_seen": "2026-09-11T12:29:42Z",
"resolved_at": "2026-09-12T12:30:15Z",
"resolved_inferred": true,
"started_at": "2026-09-11T08:00:00.000-04:00",
"state": "maintenance",
"title": "Autotask - AU01, AU02, AU03, AU04 - Server Maintenance Notice",
"updated_at": "2026-09-11T08:00:07.954-04:00",
"url": "https://stspg.io/4r99tyb48jrt"
},
{
"body": "Scheduled maintenance is currently in progress. We will provide updates as necessary.",
"first_seen": "2026-09-11T12:29:42Z",
"impact": "maintenance",
"last_seen": "2026-09-11T12:29:42Z",
"resolved_at": "2026-09-12T12:30:15Z",
"resolved_inferred": true,
"started_at": "2026-09-11T05:00:00.000-04:00",
"state": "maintenance",
"title": "Scheduled Maintenance \u2013 Cloud Target Appliance Upgrades",
"updated_at": "2026-09-11T05:01:07.418-04:00",
"url": "https://stspg.io/gk84ylhy6jlm"
},
{
"body": "Scheduled maintenance is currently in progress. We will provide updates as necessary.",
"first_seen": "2026-09-10T12:15:40Z",
"impact": "maintenance",
"last_seen": "2026-09-10T12:15:40Z",
"resolved_at": "2026-09-11T12:29:42Z",
"resolved_inferred": true,
"started_at": "2026-09-10T08:00:00.000-04:00",
"state": "maintenance",
"title": "PSA - 2026.4.3 Minor Release - AU01-AU04",
"updated_at": "2026-09-10T08:00:09.027-04:00",
"url": "https://stspg.io/qyqqnrf9qyxt"
},
{
"body": "The Kaseya R&D Team responded to alerts related to the eu.rocketcyber.com site.\n\nThe incident lasted for about 30 minutes during which Rocketcyber customers hosted in the EU region were not able to access the product.\n\nThe issue is now resolved, and we are currently monitoring the health of the service.",
"first_seen": "2026-09-10T12:15:40Z",
"impact": "none",
"last_seen": "2026-09-16T12:28:20Z",
"started_at": "2026-09-10T05:38:21.090-04:00",
"state": "monitoring",
"title": "Rocketcyber - eu.rocketcyber.com temporarily inaccessible",
"updated_at": "2026-09-10T05:38:21.152-04:00",
"url": "https://stspg.io/bbfv6lxdvp7l"
},
{
"body": "We are experiencing service disruption on PHILKAS01 Server, which may impact administrators ability to manage endpoints.\n\nWe are aware of the issue, and our team is actively working to resolve the same.\n\nWe apologize for any inconvenience.\n\n- Kaseya Cloud Operations Team",
"first_seen": "2026-09-10T12:15:40Z",
"impact": "major",
"last_seen": "2026-09-16T12:28:20Z",
"started_at": "2026-09-09T08:51:48.431-04:00",
"state": "monitoring",
"title": "[VSA9] - [PHILKAS01] - Intermittent Service Disruption",
"updated_at": "2026-09-14T09:47:17.970-04:00",
"url": "https://stspg.io/5x454m8lx7h6"
},
{
"body": "This incident has been resolved.",
"first_seen": "2026-09-09T12:30:34Z",
"impact": "major",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-09-09T08:54:33.412-04:00",
"resolved_inferred": false,
"started_at": "2026-09-08T15:43:29.509-04:00",
"state": "resolved",
"title": "Datto BCDR - Server5465 (US-East) - Degraded Node Functionality",
"updated_at": "2026-09-09T08:54:33.428-04:00",
"url": "https://stspg.io/p39rss781z9k"
},
{
"body": "The issue has been identified and a fix is being implemented.",
"first_seen": "2026-09-09T12:30:34Z",
"impact": "major",
"last_seen": "2026-09-16T12:28:20Z",
"started_at": "2026-09-08T15:10:00.382-04:00",
"state": "identified",
"title": "Datto BCDR - Server2214 (US-East) - Degraded Node Functionality",
"updated_at": "2026-09-09T08:54:51.095-04:00",
"url": "https://stspg.io/1c8n1zmpktsz"
},
{
"body": "Scheduled maintenance is currently in progress. We will provide updates as necessary.",
"first_seen": "2026-09-05T12:15:31Z",
"impact": "maintenance",
"last_seen": "2026-09-05T12:15:31Z",
"resolved_at": "2026-09-06T12:28:17Z",
"resolved_inferred": true,
"started_at": "2026-09-05T07:00:00.000-04:00",
"state": "maintenance",
"title": "VSA9 - Scheduled System Maintenance - CGSINC",
"updated_at": "2026-09-05T07:00:07.690-04:00",
"url": "https://stspg.io/74pbbhjlrppq"
},
{
"body": "Scheduled maintenance is currently in progress. We will provide updates as necessary.",
"first_seen": "2026-09-05T12:15:31Z",
"impact": "maintenance",
"last_seen": "2026-09-05T12:15:31Z",
"resolved_at": "2026-09-06T12:28:17Z",
"resolved_inferred": true,
"started_at": "2026-09-05T07:00:00.000-04:00",
"state": "maintenance",
"title": "Upcoming Security Enhancement for Your VSA Environment",
"updated_at": "2026-09-05T07:01:08.493-04:00",
"url": "https://stspg.io/rvrqk31153ph"
},
{
"body": "The maintenance window for the planned migration from Exchange Web Services (EWS) to Microsoft Graph APIs has been extended through Sunday, September 20, 2026, to allow additional time for completion and validation activities.\n\nThe R&D team has made significant progress and remains focused on completing the remaining migration tasks while ensuring service stability and backup reliability. Backup cadence remains temporarily adjusted for select Microsoft 365 workloads during this period.\n\nCustomers may continue to experience temporary backup performance degradation for Exchange services, as well as reduced backup activity for SharePoint, Teams, and OneDrive.\n\nWe will continue to provide updates as progress is made and appreciate your patience while this work is completed.",
"first_seen": "2026-09-04T17:10:49Z",
"impact": "maintenance",
"last_seen": "2026-09-16T12:28:20Z",
"started_at": "2026-09-04T13:00:00.000-04:00",
"state": "maintenance",
"title": "Datto SaaS Protection - All Regions/V3 Pods - Maintenance Notice - Microsoft Graph API Migration",
"updated_at": "2026-09-14T14:10:59.230-04:00",
"url": "https://stspg.io/4jhr21tr4jpn"
},
{
"body": "Microsoft has fixed the issue with receiving email from external domains. We have verified that emails are now getting processed without issue. This incident is resolved.",
"first_seen": "2026-09-04T14:19:03Z",
"impact": "major",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-09-04T15:40:01.079-04:00",
"resolved_inferred": false,
"started_at": "2026-09-04T08:43:33.072-04:00",
"state": "resolved",
"title": "Autotask - UK01 and UK02 Zones - Emails not being sent or received",
"updated_at": "2026-09-04T15:40:01.104-04:00",
"url": "https://stspg.io/j6wj03s1zlqc"
},
{
"body": "Scheduled maintenance is currently in progress. We will provide updates as necessary.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "maintenance",
"last_seen": "2026-09-04T09:06:33Z",
"resolved_at": "2026-09-04T10:17:20Z",
"resolved_inferred": true,
"started_at": "2026-09-04T03:00:00.000-04:00",
"state": "maintenance",
"title": "VSA9 - VSA Patch Release v9.5.27 - Revan/Leo",
"updated_at": "2026-09-04T03:00:10.168-04:00",
"url": "https://stspg.io/b5yljwx3b6xg"
},
{
"body": "This incident has been resolved.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "minor",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-09-04T10:06:06.541-04:00",
"resolved_inferred": false,
"started_at": "2026-09-03T15:20:05.573-04:00",
"state": "resolved",
"title": "Datto Endpoint Backup for PC - Backup and Restore - Service Disruption for Customers Hosted on Cloud Siris 299242",
"updated_at": "2026-09-04T10:06:06.558-04:00",
"url": "https://stspg.io/4fxpn7cw40z5"
},
{
"body": "The issue preventing Secure Edge administrators from viewing recent usage information within Datto Network Manager has been resolved.\n\nQueued data has finished processing, and usage metrics are now available as expected. We appreciate your patience while we worked through this issue.\n\nSubscribe to the Kaseya Status Page for up to date information at https://status.kaseya.com/",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "major",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-09-02T19:17:22.893-04:00",
"resolved_inferred": false,
"started_at": "2026-09-02T17:11:29.033-04:00",
"state": "resolved",
"title": "Datto Networking - Secure Edge Data Usage Reporting Issue",
"updated_at": "2026-09-02T19:17:22.911-04:00",
"url": "https://stspg.io/x480w33ywfn2"
},
{
"body": "This incident has been resolved.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "minor",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-09-11T11:06:09.946-04:00",
"resolved_inferred": false,
"started_at": "2026-09-02T16:33:44.152-04:00",
"state": "resolved",
"title": "Datto SaaS Protection - Backup performance degradation for Exchange services on pod 'aue1-saas-p0'",
"updated_at": "2026-09-11T11:06:09.963-04:00",
"url": "https://stspg.io/hmwyc74h6zm0"
},
{
"body": "This incident has been resolved.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "major",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-09-08T12:26:22.965-04:00",
"resolved_inferred": false,
"started_at": "2026-09-02T06:10:45.000-04:00",
"state": "resolved",
"title": "Datto BCDR - Cloud Recovery - Cloud Operations Service Impact",
"updated_at": "2026-09-08T12:26:22.983-04:00",
"url": "https://stspg.io/ys5ngj1l37tr"
},
{
"body": "This incident has been resolved.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "critical",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-09-02T06:11:31.414-04:00",
"resolved_inferred": false,
"started_at": "2026-09-02T02:00:34.000-04:00",
"state": "resolved",
"title": "Error 500 in Datto Partner Portal for Backup & RMM Products.",
"updated_at": "2026-09-02T06:11:31.435-04:00",
"url": "https://stspg.io/sqc645v377b5"
},
{
"body": "This incident has been resolved.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "minor",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-09-02T12:51:47.422-04:00",
"resolved_inferred": false,
"started_at": "2026-09-01T17:49:24.000-04:00",
"state": "resolved",
"title": "Intuit Reports QuickBooks Online API Errors",
"updated_at": "2026-09-02T12:51:47.442-04:00",
"url": "https://stspg.io/3tkhx468s6gz"
},
{
"body": "This incident has been resolved.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "critical",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-09-01T09:27:53.578-04:00",
"resolved_inferred": false,
"started_at": "2026-09-01T08:13:23.834-04:00",
"state": "resolved",
"title": "Datto SaaS Protection - SaaS Protection Status Page Is Not Loading Details",
"updated_at": "2026-09-01T09:27:53.600-04:00",
"url": "https://stspg.io/n929fckhmbht"
},
{
"body": "The issue affecting access to the Datto RMM Vidal platform has been resolved.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "critical",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-09-01T11:56:49.484-04:00",
"resolved_inferred": false,
"started_at": "2026-09-01T07:37:56.194-04:00",
"state": "resolved",
"title": "DattoRMM - Vidal - Users are unable to access the platform.",
"updated_at": "2026-09-01T11:56:49.502-04:00",
"url": "https://stspg.io/16505m12w1kb"
},
{
"body": "This incident has been resolved.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "minor",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-08-31T13:34:14.106-04:00",
"resolved_inferred": false,
"started_at": "2026-08-31T12:01:10.696-04:00",
"state": "resolved",
"title": "Datto Workplace - US Region - Intermittent Service Connectivity Issues",
"updated_at": "2026-08-31T13:34:14.128-04:00",
"url": "https://stspg.io/fmzvg5y6n40z"
},
{
"body": "This incident has been resolved.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "critical",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-08-28T14:23:12.837-04:00",
"resolved_inferred": false,
"started_at": "2026-08-28T13:13:41.132-04:00",
"state": "resolved",
"title": "[VSA9] - [EU - VSA114] - Service Disruption",
"updated_at": "2026-08-28T14:23:12.858-04:00",
"url": "https://stspg.io/6d1hz2403dgn"
},
{
"body": "This incident has been resolved.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "minor",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-08-31T09:40:38.705-04:00",
"resolved_inferred": false,
"started_at": "2026-08-28T06:30:39.388-04:00",
"state": "resolved",
"title": "Datto RMM / Datto EDR / Datto AV \u2013 Integration \u2013 Datto RMM Reporting Datto EDR and Datto AV Products as Not Detected",
"updated_at": "2026-08-31T09:40:38.726-04:00",
"url": "https://stspg.io/pyzv7tm89mff"
},
{
"body": "This incident has been resolved.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "minor",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-08-31T16:11:25.460-04:00",
"resolved_inferred": false,
"started_at": "2026-08-27T10:52:42.789-04:00",
"state": "resolved",
"title": "Datto SaaS Protection - Backup performance degradation for Exchange services on pod 'use1-saas-p7'",
"updated_at": "2026-08-31T16:11:25.475-04:00",
"url": "https://stspg.io/qtsv3wznvc5c"
},
{
"body": "**Datto EDR - Mass Detection on Windows Behavior \u2013 2026-08-27**\u00a0\n\n**Summary**\u00a0\n\nBetween **2026-08-27 08:00 UTC** and **2026-08-27 16:00 UTC**, Datto EDR customers experienced an elevated volume of detections generated by the **Possible Shim Database Persistence via sdbinst.exe** detection rule. The increase in alerts created additional operational overhead for customers and analysts reviewing alerts. No service outage occurred, and endpoint protection functionality remained operational throughout the event. The issue was resolved after the detection rule was updated to account for a newly observed legitimate Windows operating system behavior. \u00a0\n\n**Root Cause**\u00a0\n\nA legitimate Microsoft Windows behavior involving **sdbinst.exe** and the file path **C:\\\\Windows\\\\appcompat\\\\cloudsdb\\\\apppatch.sdb** was not covered by the existing exclusions within a Datto EDR detection rule. A change in Microsoft's behavior matched the criteria of the rule **Possible Shim Database Persistence via sdbinst.exe**, resulting in a higher-than-expected volume of detections. The rule logic was updated to properly account for the newly observed behavior and eliminate the unintended detections. \u00a0\n\n**Incident Timeline**\u00a0\n\n* **Identified:** 2026-08-27 08:00 UTC \\(customer reports and alert volume increase identified\\) \u00a0\n\n* **Public Notification:** 2026-08-27 11:00 UTC \\(incident escalated to Product and Detection Engineering teams and communications initiated\\) \u00a0\n\n* **Resolved:** 2026-08-27 16:00 UTC \\(updated rule deployed and alert volume returned to expected levels\\) \u00a0\n\n**Preventative Measures**\u00a0\n\nTo reduce the likelihood and impact of similar incidents in the future, we are implementing the following improvements:\u00a0\n\n**Enhancements to Monitoring and Alerting**\u00a0\n\n* Implement monitoring and baselining for individual detection rules to identify abnormal spikes in alert volume more rapidly.\u00a0\n\n* Develop internal metrics that provide visibility into detection trends and anomalous rule behavior before large-scale customer impact occurs. \u00a0\n\n**Enhancements to Incident Management and Response**\u00a0\n\n* Improve escalation workflows for significant detection-volume increases to ensure appropriate engineering resources are engaged as quickly as possible.\u00a0\n\n* Continue refining response procedures for detection-rule tuning and validation when unexpected platform or operating system behavior changes are observed. \u00a0\n\n**Detection Content Improvements**\u00a0\n\n* Enhance detection engineering review processes to account for evolving operating system behaviors and newly introduced legitimate execution patterns.\u00a0\n\n* Expand validation and exclusion testing for detection rules where operating system updates may introduce behavior changes that resemble suspicious activity. \u00a0\n\n\u00a0\n\n**Customer Impact**\u00a0\n\n* Product Affected: **Datto EDR**\u00a0\n\n* Impact Type: **Increased detection volume / mass alerts**\u00a0\n\n* Service Availability: **No outage**\u00a0\n\n* Security Protection Status: **Protection remained active and operational**\u00a0\n\n* Customer Impact: Customers experienced increased alert volume requiring additional review and operational effort. \u00a0\n\nThis incident has been fully resolved, and Datto EDR continues to operate normally.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "minor",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-09-03T11:28:16.779-04:00",
"resolved_inferred": false,
"started_at": "2026-08-27T08:39:45.700-04:00",
"state": "postmortem",
"title": "Datto EDR \u2014 Elevated Alert Volume \u2014 \"Possible Shim Database Persistence via sdbinst.exe\"",
"updated_at": "2026-09-08T17:22:02.852-04:00",
"url": "https://stspg.io/9yhmpwxnjj83"
},
{
"body": "This incident has been resolved.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "major",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-08-28T14:18:27.869-04:00",
"resolved_inferred": false,
"started_at": "2026-08-26T10:40:14.950-04:00",
"state": "resolved",
"title": "Datto Endpoint Backup for PC - Germany - Degraded Service Performance Affecting Select Infrastructure Nodes",
"updated_at": "2026-08-28T14:18:27.887-04:00",
"url": "https://stspg.io/35xgm0rxcq1d"
},
{
"body": "This incident has been resolved.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "minor",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-08-31T09:43:12.659-04:00",
"resolved_inferred": false,
"started_at": "2026-08-25T16:39:37.000-04:00",
"state": "resolved",
"title": "Datto SaaS Protection - M365 Backup and Restore issues affecting customers in multiple regions",
"updated_at": "2026-08-31T09:43:12.673-04:00",
"url": "https://stspg.io/zk3wq7h3mhvn"
},
{
"body": "This incident has been resolved.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "major",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-09-03T12:44:14.081-04:00",
"resolved_inferred": false,
"started_at": "2026-08-25T12:09:00.000-04:00",
"state": "resolved",
"title": "Datto BCDR - Server3824 (Germany Region) - Degraded Node Functionality",
"updated_at": "2026-09-03T12:44:14.094-04:00",
"url": "https://stspg.io/k7vgnxk54sby"
},
{
"body": "This incident has been resolved.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "critical",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-08-25T12:34:13.021-04:00",
"resolved_inferred": false,
"started_at": "2026-08-24T11:46:07.193-04:00",
"state": "resolved",
"title": "Germany Data Center Infrastructure - Service Performance Degradation Impacting Offsite Capabilities.",
"updated_at": "2026-08-25T12:34:13.043-04:00",
"url": "https://stspg.io/d51tjkms1cgk"
},
{
"body": "Scheduled maintenance is currently in progress. We will provide updates as necessary.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "maintenance",
"last_seen": "2026-09-16T12:28:20Z",
"started_at": "2026-08-24T08:00:00.000-04:00",
"state": "maintenance",
"title": "Kaseya - Scheduled Server Infrastructure Maintenance",
"updated_at": "2026-09-09T15:20:34.002-04:00",
"url": "https://stspg.io/wtddbt8bq1l0"
},
{
"body": "Changes made by the Kaseya R&D team have proven successful and full functionality has been restored. \n\nThe issue is now considered resolved.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "minor",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-08-22T10:50:09.323-04:00",
"resolved_inferred": false,
"started_at": "2026-08-21T14:22:34.803-04:00",
"state": "resolved",
"title": "Datto SaaS Protection - Backup and Restore issues affecting customers in multiple regions",
"updated_at": "2026-08-22T10:50:09.337-04:00",
"url": "https://stspg.io/6ky76l8l8t7t"
},
{
"body": "The issue affecting Activity Log performance on the Vidal Platform following the 15.1 release has been resolved.\n\nThe Kaseya Engineering Team implemented a fix and has confirmed that Activity Logs are loading as expected after monitoring the platform to ensure ongoing stability and performance.\n\nShould you have any additional questions or require assistance, please contact our support team at https://helpdesk.kaseya.com/hc/en-gb#/contact\n\nSubscribe to the Kaseya Status Page for up-to-date information at https://status.kaseya.com/",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "minor",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-08-28T14:43:01.281-04:00",
"resolved_inferred": false,
"started_at": "2026-08-21T13:17:03.617-04:00",
"state": "resolved",
"title": "DattoRMM - Vidal - Activity Log pages are slow to load",
"updated_at": "2026-08-28T14:43:01.303-04:00",
"url": "https://stspg.io/zbp626jggpcc"
},
{
"body": "This incident has been resolved.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "major",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-08-19T16:08:09.519-04:00",
"resolved_inferred": false,
"started_at": "2026-08-19T07:25:27.359-04:00",
"state": "resolved",
"title": "SaaS Protection - isw1-bfyii-1131 - Backup Performance Degradation",
"updated_at": "2026-08-19T16:08:09.534-04:00",
"url": "https://stspg.io/6ycxn3n8c2kh"
},
{
"body": "This incident has been resolved.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "minor",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-08-20T08:38:40.555-04:00",
"resolved_inferred": false,
"started_at": "2026-08-18T10:15:05.998-04:00",
"state": "resolved",
"title": "Datto RMM - Vidal - Post 15.1.0 Release - Activity Log Issues",
"updated_at": "2026-08-20T08:38:40.568-04:00",
"url": "https://stspg.io/nvyrzkqmkhw3"
},
{
"body": "This incident has been resolved.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "major",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-08-18T10:13:49.607-04:00",
"resolved_inferred": false,
"started_at": "2026-08-17T23:46:29.225-04:00",
"state": "resolved",
"title": "[INKY] - Email processing by INKY is being delayed",
"updated_at": "2026-08-18T10:13:49.627-04:00",
"url": "https://stspg.io/qf9qqhrkbx69"
},
{
"body": "This incident has been resolved.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "critical",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-08-18T00:26:24.733-04:00",
"resolved_inferred": false,
"started_at": "2026-08-17T21:53:27.913-04:00",
"state": "resolved",
"title": "[Kaseya Store] - [Kaseya Store] - [Kaseya Store inaccessible]",
"updated_at": "2026-08-18T00:26:24.750-04:00",
"url": "https://stspg.io/wq2ml7lkzyx5"
},
{
"body": "This incident has been resolved.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "major",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-08-14T15:32:50.224-04:00",
"resolved_inferred": false,
"started_at": "2026-08-13T05:24:48.841-04:00",
"state": "resolved",
"title": "Datto RMM - Merlot (EMEA) - Job Service Failures",
"updated_at": "2026-08-14T15:32:50.244-04:00",
"url": "https://stspg.io/qb16fmkl0szt"
},
{
"body": "This incident has been resolved.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "minor",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-08-14T08:14:53.308-04:00",
"resolved_inferred": false,
"started_at": "2026-08-12T17:56:16.380-04:00",
"state": "resolved",
"title": "Datto Workplace - Degraded Performance in US Regions",
"updated_at": "2026-08-14T08:14:53.324-04:00",
"url": "https://stspg.io/lbks1hrcs2pj"
},
{
"body": "This incident has been resolved.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "major",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-08-12T07:55:24.738-04:00",
"resolved_inferred": false,
"started_at": "2026-08-11T21:48:45.450-04:00",
"state": "resolved",
"title": "Inky Dashboard partial outage",
"updated_at": "2026-08-12T07:55:24.754-04:00",
"url": "https://stspg.io/447jh8dh8wty"
},
{
"body": "This incident has been resolved.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "minor",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-08-12T15:33:16.373-04:00",
"resolved_inferred": false,
"started_at": "2026-08-11T13:35:45.116-04:00",
"state": "resolved",
"title": "DattoRMM - Vidal - ConnectWise Integration is inaccessible",
"updated_at": "2026-08-12T15:33:16.389-04:00",
"url": "https://stspg.io/8ppf8khg2kh8"
},
{
"body": "This incident has been resolved.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "minor",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-08-10T09:23:00.169-04:00",
"resolved_inferred": false,
"started_at": "2026-08-08T13:15:07.741-04:00",
"state": "resolved",
"title": "Datto SaaS protection - Backups currently paused des1-bfyii-1127",
"updated_at": "2026-08-10T09:23:00.189-04:00",
"url": "https://stspg.io/b729r7d6fngp"
},
{
"body": "This incident has been resolved.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "critical",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-08-07T19:48:58.436-04:00",
"resolved_inferred": false,
"started_at": "2026-08-07T18:59:36.960-04:00",
"state": "resolved",
"title": "Autotask PSA - Sydney Data Center Web Center and API - Inaccessible",
"updated_at": "2026-08-07T19:48:58.453-04:00",
"url": "https://stspg.io/r638rc6f9mfv"
},
{
"body": "This incident has been resolved.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "critical",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-08-24T14:02:27.790-04:00",
"resolved_inferred": false,
"started_at": "2026-08-06T13:51:58.612-04:00",
"state": "resolved",
"title": "Datto BCDR - Archived Agents May Generate Sync Completion Alerts for Points Marked for Offsite.",
"updated_at": "2026-08-24T14:02:27.803-04:00",
"url": "https://stspg.io/y09zv7ql9yf1"
},
{
"body": "# Summary: \n\nBetween 2026-08-06 05:41 UTC and 2026-08-06 18:03 UTC, ConnectBooster customers were unable to login to ConnectBooster using KaseyaOne Single-Sign-On \\(SSO\\). \n\n# Root Cause: \n\nAn unexpected failure in a dependency used by the SSO login process caused login attempts to fail. \n\n## Incident Timeline: \n\n\u2022 Identified: 2026-08-06 13:30 UTC \n\n\u2022 Public Notification: 2026-08-06 14:15 UTC \n\n\u2022 Resolved: 2026-08-06 18:03 UTC \n\n# Preventative Measures: \n\nTo reduce the likelihood and impact of similar incidents in the future, we are taking the following steps. \n\n## Enhancements to Monitoring and Alerting: \n\n* Enhance login workflow logging to provide improved visibility into authentication performance and failures across all login methods. \n* Implement monitoring and alerting for login workflows using request, error, and performance metrics, enabling the team to quickly identify and respond to authentication issues.\n\n##  Enhancements to Infrastructure Resiliency: \n\n* Streamline services within the SSO login workflow so that authentication can continue successfully even if related supporting services are unavailable.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "major",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-08-06T17:28:20.472-04:00",
"resolved_inferred": false,
"started_at": "2026-08-06T10:15:11.000-04:00",
"state": "postmortem",
"title": "ConnectBooster  - Unable to log in via Kaseya One",
"updated_at": "2026-09-03T10:35:34.104-04:00",
"url": "https://stspg.io/gf0r9s41h391"
},
{
"body": "This incident has been resolved.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "minor",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-08-06T12:56:47.953-04:00",
"resolved_inferred": false,
"started_at": "2026-08-06T09:41:57.629-04:00",
"state": "resolved",
"title": "KaseyaOne & Kaseya Store - Issues with payment provider",
"updated_at": "2026-08-06T12:56:47.969-04:00",
"url": "https://stspg.io/d4pt85y5r50n"
},
{
"body": "We continue to make steady progress on our migration efforts. Our teams are actively monitoring performance and stability as the rollout expands, and work remains ongoing to ensure a smooth transition while maintaining service reliability.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "major",
"last_seen": "2026-09-16T12:28:20Z",
"started_at": "2026-08-05T15:40:45.206-04:00",
"state": "monitoring",
"title": "Datto SaaS Protection - Backup performance degradation for M365 services affecting multiple pods/regions",
"updated_at": "2026-09-15T16:51:14.455-04:00",
"url": "https://stspg.io/1hrcp3t4t3y5"
},
{
"body": "**\\[Datto Endpoint Backup for PC\\]** \u00a0\n\n**A performance degradation event affected the Datto Endpoint Backup for PC Server service, impacting service responsiveness and availability\u00a0\u2013\u00a02026-07-31**\u00a0\n\n\u200c\n\n**Summary:** Between **2026-07-31 05:30 PM UTC** and **2026-08-05 07:30 PM UTC**, Datto Endpoint Backup for PC customers\u00a0hosted on Cloud Siris 215069 encountered reduced performance and intermittent issues with offsite capabilities.\u00a0\n\n\u00a0\u00a0\n\n**Root Cause:**\u00a0\u00a0\n\nThe service interruption resulted from a hardware failure. Recovery activities were conducted with a focus on maintaining service integrity and minimizing potential impact. Following restoration of service, a review was completed and improvement actions have been identified to further enhance recovery processes.\u00a0\n\n\u00a0\n\n**Incident Timeline:**\u00a0\u00a0\n\n* Identified: **2026-07-31 05:30 PM UTC**\u00a0\u00a0\n\n* Public Notification: **2026-07-31 05:34 PM UTC**\u00a0\u00a0\n\n* Resolved: **2026-08-05\u00a007:30 PM UTC**\u00a0\u00a0\n\n\u00a0\u00a0\n\n**Preventative Measures:** To reduce the likelihood and impact of similar incidents in the future, we are taking the following steps.\u00a0\u00a0\n\n* Create standardized documentation for system restoration workflows and conduct process reviews with key technical and operational teams to ensure effective execution, knowledge sharing, and continuous improvement.\u00a0\n\n* Establish a centralized and well-documented catalog of monitoring alerts and designated response teams to improve operational visibility, accountability, and incident management.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "major",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-08-05T14:06:40.979-04:00",
"resolved_inferred": false,
"started_at": "2026-07-31T13:44:45.787-04:00",
"state": "postmortem",
"title": "Datto Endpoint Backup for PC - Service Disruption for Customers Hosted on Cloud Siris 215069",
"updated_at": "2026-08-19T11:28:20.035-04:00",
"url": "https://stspg.io/qtlhlmdt244q"
},
{
"body": "**Root Cause Analysis \u2013 DRMM Agent Services Incorrectly Flagged by Endpoint Security Software**\u00a0\n\n**Summary**\u00a0\n\nBetween **2026-07-30 17:00 UTC and 2026-07-31 18:43 UTC**, some Datto RMM customers on the Syrah platform experienced issues following the deployment of agent version **15.1.0**. The issue affected endpoints utilizing **Sophos**, where certain DRMM agent services were identified as malicious. In affected environments, agent files were quarantined or removed, causing the Datto RMM agent to become non-functional until remediation actions were completed.\u00a0\n\nThe issue affected a subset of customers and was resolved after coordination with the security vendor.\u00a0\n\n**Root Cause**\u00a0\n\nFollowing the deployment of DRMM agent version 15.1.0, certain agent components were incorrectly identified as malicious by a third-party endpoint security vendor. The detection was a false positive and was not the result of malware or unauthorized code within the DRMM agent. Investigation determined that the detection was likely related to changes in the digital signing reputation of the agent files, which caused the security tool to classify legitimate agent activity as suspicious.\u00a0\n\n**Incident Timeline**\u00a0\n\n* **Identified:** 2026-07-30 21:00 UTC\u00a0\n\n* **Public Notification:** 2026-07-31 02:27 UTC\u00a0\n\n* **Resolved:** 2026-07-31 18:43 UTC\u00a0\n\n**Preventative Measures**\u00a0\n\nTo reduce the likelihood and impact of similar incidents in the future, we are implementing the following improvements:\u00a0\n\n**Enhancements to Release Validation**\u00a0\n\n* Further strengthen our pre-release validation by incorporating a broader set of security and threat-intelligence platforms before agent updates are broadly deployed.\u00a0\n\n* Broaden third-party endpoint security testing to further improve early detection of potential false-positive classifications before release.\u00a0\n\n**Enhancements to Vendor Coordination**\u00a0\n\n* Expand the existing file reputation submission process to include additional security providers to further improve coordination and response options, reducing reliance on a single vendor path.\u00a0\n\n* Establish more formalized engagement processes with security vendors to facilitate faster review and resolution of false-positive detections.\u00a0\n\n**Enhancements to Agent Deployment Practices**\u00a0\n\n* Evaluate staged agent rollout capabilities that would allow updates to be gradually deployed to a subset of endpoints before broader distribution limiting the scope of impact when issues are detected.\u00a0\n\n* Use phased deployments to identify unexpected environmental interactions earlier and further reduce potential customer impact.\u00a0\n\n**Enhancements to Agent Update Architecture**\u00a0\n\n* Review and improve elements of the agent update mechanism to reduce the likelihood that normal update activities are misinterpreted by security software.\u00a0\n\n* Continue refining update workflows to improve compatibility with modern endpoint protection technologies to further reduce the risk of false positive classifications",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "critical",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-08-03T12:04:18.574-04:00",
"resolved_inferred": false,
"started_at": "2026-07-30T22:27:33.000-04:00",
"state": "postmortem",
"title": "Datto RMM (Syrah)-- Datto RMM Agent Detected as Malware Post 15.1.0",
"updated_at": "2026-08-12T15:47:50.146-04:00",
"url": "https://stspg.io/nnxwd68tbdcl"
},
{
"body": "**Datto RMM - Global Filters Using Site Criteria Returned Incorrect Results \u2013 2026-07-30**\u00a0\n\n**Summary**\u00a0\n\nBetween **2026-07-30 18:10 UTC** and **2026-07-31 02:30 UTC**, some **Datto RMM** customers experienced an issue where **Global Filters using Site specific criteria, including Site Name**, **Site Description**, or **Site is On-Demand,** and **excluding \u201cdoes not contain\u201d** criteria, returned broader-than-expected device results. \u00a0\n\nAs a result, customers using the affected filter configurations may have seen devices incorrectly included in filter results, creating a risk of inaccurate device targeting for downstream automation, policies, or jobs that ran during the exposure window.\u00a0\n\nThe time required to fully restore service was extended because a rollback path for the release was not available. As a result, mitigation required the issue to be diagnosed, a software fix to be developed, tested, and deployed before the incident could be resolved.\u00a0\n\nEngineering isolated the regression, developed a corrective code change, validated the fix, and deployed it to restore expected filter behavior.\u00a0\n\n\u200c\n\n**Root Cause**\u00a0\n\nA software defect introduced during a performance optimization of site-based filtering logic caused certain filter criteria to be processed incorrectly. Under specific filter configurations, portions of the filtering logic were not applied as intended, resulting in broader device selection results than expected.\u00a0\n\nA corrective code change was validated and deployed to restore expected filter behavior.\u00a0\n\n\u200c\n\n**Incident Timeline**\u00a0\n\n**Identified:** 2026-07-31 00:30 UTC\u00a0\n\n**Public Notification:** 2026-07-31 01:48 UTC\u00a0\n\n**Resolved:** 2026-07-31 02:30 UTC\u00a0\n\n\u200c\n\n**Preventative Measures**\u00a0\n\nTo reduce the likelihood and impact of similar incidents in the future, we are taking the following steps:\u00a0\n\n**Enhancements to Release Management Practices**\u00a0\n\n* Expand unit test coverage for code changes to improve validation of functionality affected by application changes.\u00a0\n\n* Expand automated regression test coverage across filter functionality, including historical defect scenarios and previously identified filter-related use cases.\u00a0\n\n* Increase automated test coverage for critical customer workflows and core platform functionality to improve release readiness validation.\u00a0\n\n* Execute automated regression testing as part of both development and release validation processes.\u00a0\n\n* Evaluate additional release strategies such as customer beta testing, canary deployments, and blue/green deployments to enhance existing release strategies and further reduce risk, improve early issue detection, and minimize customer impact during software releases.\u00a0\n\n**Enhancements to Quality Assurance and Detection**\u00a0\n\n* Implement additional automated regression testing for filter functionality and related workflows.\u00a0\n\n* Additional scope will be added to automated Regression testing that covers functional completeness and accuracy to cover critical customer workflow validation\u00a0\u00a0\n\n* Expand monitoring and alerting around post-deployment validation activities to accelerate identification of release-related issues.\u00a0\n\n* Establish automated validation of key customer workflows following deployment to improve early detection of functional regressions during QA testing.\u00a0\n\n**Enhancements to Incident Recovery Capabilities**\u00a0\n\n* Implement automated post-deployment validation of critical workflows and use resulting signals to accelerate mitigation decisions when issues are detected post-release.\u00a0\n\n* Develop rollback capabilities to enable restoration to a known good release version when appropriate.\u00a0\n\n* Assess rollback mechanisms that align with future deployment strategy improvements, including staged deployment and service-based release models.\u00a0\n\n\u00a0\n\nThese improvements are intended to strengthen release validation, improve early detection of functional regressions, reduce restoration time during incidents, and limit the potential impact of future release-related issues.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "critical",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-07-30T23:26:19.199-04:00",
"resolved_inferred": false,
"started_at": "2026-07-30T20:48:34.000-04:00",
"state": "postmortem",
"title": "DRMM (Syrah) --  Device Filter \"Site Name\" criterion ignored, returns devices from all sites",
"updated_at": "2026-08-05T08:55:21.076-04:00",
"url": "https://stspg.io/frb3sddldddx"
},
{
"body": "This incident has been resolved.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "major",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-07-30T16:04:38.927-04:00",
"resolved_inferred": false,
"started_at": "2026-07-30T09:44:43.793-04:00",
"state": "resolved",
"title": "Datto SaaS Protection - Service disruption for customers hosted on node 'des1-bfyii-2985'",
"updated_at": "2026-07-30T16:04:38.950-04:00",
"url": "https://stspg.io/kkg1xt8vrht8"
},
{
"body": "Backups continue to process and all customer accounts hosted on pod 'gbe2-saas-p0' are accessible and functioning normally.\n\nThis incident is resolved.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "critical",
"last_seen": "2026-09-15T12:28:18Z",
"resolved_at": "2026-07-29T16:15:06.271-04:00",
"resolved_inferred": false,
"started_at": "2026-07-29T06:55:57.907-04:00",
"state": "resolved",
"title": "Datto SaaS Protection - Service disruption affecting customers hosted on pod 'gbe2-saas-p0'",
"updated_at": "2026-07-29T16:15:06.291-04:00",
"url": "https://stspg.io/hvcww61gf2jl"
},
{
"body": "# Summary: \n\nBetween 2026-07-28 14:53 UTC and 2026-07-29 14:38 UTC, Autotask customers hosted on zones AE01, AE02, AE03, AE04, AW01, AW02, AW03, AW04, PR01, LR01, ES01, AU01, and AU02 experienced a delay in inbound email ticket creation. \n\n# Root Cause: \n\nA configuration issue introduced during the deployment of a new environment resulted in unintended mailbox access conflicts, which unexpectedly interfered with normal email processing and delayed ticket creation from inbound emails. \n\n## Incident Timeline: \n\n* Identified: 2026-07-28 15:12 UTC \n* Public Notification: 2026-07-28 18:01 UTC \n* Mitigated: 2026-07-28 18:06 UTC \n* Resolved: 2026-07-29 14:38 UTC \n\n# Preventative Measures: \n\nTo reduce the likelihood and impact of similar incidents in the future, we are taking the following steps. \n\n* **Enhancements to Release and Configuration Management**: We are strengthening our environment deployment process by introducing additional validation and review checkpoints for configuration settings before new environments are brought into service. \n* **Enhancements to Monitoring and Alerting**: We are implementing additional monitoring and alerting for email processing workflows to enable faster detection and response when abnormal error rates occur. \n* **Enhancements to Service Resiliency**: We are improving email processing workflow to ensure messages are easier to reprocess if processing failures occur, reducing the amount of time required to remediate mail processing problems in the future. \n* **Enhancements to Diagnostics and Troubleshooting**: We are expanding operational logging and diagnostic capabilities to provide greater visibility into processing failures and accelerate root cause identification and recovery efforts. \n* **Enhancements to Incident Response**: We have reviewed and refined our operational procedures and recovery processes to reduce restoration times and minimize customer impact during future incidents.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "major",
"last_seen": "2026-09-15T12:28:18Z",
"resolved_at": "2026-07-29T03:04:25.682-04:00",
"resolved_inferred": false,
"started_at": "2026-07-28T14:01:32.762-04:00",
"state": "postmortem",
"title": "Autotask - Multiple Regions - Inbound emails are not creating tickets",
"updated_at": "2026-08-12T09:51:50.985-04:00",
"url": "https://stspg.io/xdv1f1n4yk5z"
},
{
"body": "**Endpoint Backup v2\u00a0-\u00a0Assets in UniView may inaccurately report backup failures despite successful backup completion\u00a0\u2013 2026-07-27**\u00a0\n\n\u00a0\n\n**Summary:** Between **2026-07-27 20:00 UTC and 2026-07-28 23:30 UTC**, Endpoint Backup v2 customers experienced an issue in which assets within UniView incorrectly reported backup failures, despite backups completing successfully.\u00a0\n\n\u00a0\u00a0\n\n**Root Cause:**\u00a0\u00a0\n\nThe incident was caused by a processing capacity constraint that delayed the synchronization of backup status information. As a result, recently completed backups were not reflected in the user interface in a timely manner, creating visibility issues for customers. Backup operations continued to complete successfully, and no backup data was impacted.\u00a0\n\n\u00a0\n\n**Incident Timeline:**\u00a0\u00a0\n\n* Identified: **2026-07-27 20:00\u00a0UTC**\u00a0\u00a0\n\n* Public Notification: **2026-07-28 13:52 UTC**\u00a0\u00a0\n\n* Resolved: **2026-07-28 23:30\u00a0UTC**\u00a0\u00a0\n\n\u00a0\u00a0\n\n**Preventative Measures:** To reduce the likelihood and impact of similar incidents in the future, we are taking the following steps.\u00a0 \u00a0\n\n* Implemented a more efficient data synchronization mechanism to reduce processing overhead, improve system performance, and accelerate the delivery of updated information across the platform.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "minor",
"last_seen": "2026-09-16T12:28:20Z",
"resolved_at": "2026-07-29T19:59:44.369-04:00",
"resolved_inferred": false,
"started_at": "2026-07-28T08:52:54.364-04:00",
"state": "postmortem",
"title": "Endpoint Backup v2 - UniView is exhibiting inconsistencies in backup reporting, resulting in inaccurate backup status visibility",
"updated_at": "2026-09-02T09:56:29.090-04:00",
"url": "https://stspg.io/y5b61x512hqq"
},
{
"body": "This incident has been resolved.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "major",
"last_seen": "2026-09-14T12:29:13Z",
"resolved_at": "2026-07-27T16:00:56.213-04:00",
"resolved_inferred": false,
"started_at": "2026-07-27T13:35:33.590-04:00",
"state": "resolved",
"title": "Datto SaaS Protection - Service disruption for customers hosted on node 'use1-bfyii-2901'",
"updated_at": "2026-07-27T16:00:56.229-04:00",
"url": "https://stspg.io/khwstms5vd7n"
},
{
"body": "**Root Cause Analysis \u2013 VSA10 Intermittent Service Degradation Following 10.28 Release**\u00a0\n\n**Summary**\u00a0\n\nBetween **2026-07-24 02:00 UTC** and **2026-07-24 20:25 UTC**, some customers using VSA10 experienced intermittent service degradation, including temporary agent connectivity issues, delayed agent check-ins, and HTTP 503 errors. During periods of elevated automation activity, affected agents could appear to repeatedly transition between online and offline states before reconnecting automatically. The issue was fully resolved on July 24, 2026.\u00a0\u00a0\n\n**Root Cause**\u00a0\n\nA software change introduced in the 10.28 release altered how certain automation-related database operations were processed. Under high levels of concurrent automation activity, this change resulted in resource contention within the application environment, leading to intermittent service interruptions and delayed responses for agent communications. A hotfix was developed, tested, and deployed the same day to restore the previous transaction handling behavior and eliminate the contention condition.\u00a0\n\n**Incident Timeline**\u00a0\n\n* **Identified:** 2026-07-24 02:00 UTC\u00a0\n\n* **Public Notification:** 2026-07-24 13:27 UTC\u00a0\n\n* **Resolved:** 2026-07-24 20:25 UTC\u00a0\n\n**Preventative Measures**\u00a0\n\nTo reduce the likelihood and impact of similar incidents in the future, we are implementing the following improvements:\u00a0\n\n**Enhancements to Monitoring and Alerting**\u00a0\n\n* Introduce additional monitoring and alerting for database contention and long-running transactions to further accelerate detection of similar conditions.\u00a0\n\n* Expand service health dashboards to further improve visibility into application response performance.\u00a0\n\n**Enhancements to Release Management Practices**\u00a0\n\n* Implement expanded canary deployment procedures for higher-risk platform changes, allowing updates to be validated on a limited subset of infrastructure before broader rollout, further reducing the risk for these deployments.\u00a0\n\n* Add additional review requirements for changes affecting high-volume agent communication paths, further reducing risk for these deployments.\u00a0\n\n**Enhancements to Validation and Testing**\u00a0\n\n* Strengthen load and concurrency testing for components that support large-scale automation activity, further increasing scalability at the time of deployment.\u00a0\n\n* Increase validation coverage for scenarios that simulate production-scale agent workloads to catch scalability issues prior to deployment, further reducing risk.\u00a0\n\n**Enhancements to Platform Resiliency**\u00a0\n\n* Continue development of automation workload distribution improvements designed to reduce concentrated processing spikes during large-scale task execution, further increasing scalability at the time of deployment.\u00a0\n\n* Review additional service isolation and capacity improvements to further reduce the impact of localized workload surges.\u00a0\n\n**Completed Corrective Action**\u00a0\n\n* The software change responsible for the contention condition was reverted through a hotfix deployed on July 24, 2026. Following deployment, monitoring confirmed that error rates returned to normal levels and no recurrence of the issue was observed.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "major",
"last_seen": "2026-09-14T12:29:13Z",
"resolved_at": "2026-07-24T17:23:58.368-04:00",
"resolved_inferred": false,
"started_at": "2026-07-24T09:27:23.650-04:00",
"state": "postmortem",
"title": "VSAX - EMEA/APAC - Intermittent 500 errors and offline devices",
"updated_at": "2026-08-12T15:59:30.799-04:00",
"url": "https://stspg.io/skjbydvv59yy"
},
{
"body": "**Datto Partner Portal - Intermittent HTTP 500 errors encountered when accessing the Portal and Recovery Launchpad \u2013 2026-07-24**\u00a0\n\n\u00a0\n\n**Summary:** Between **2026-07-24 03:00 AM UTC** and **2026-07-24 11:29 AM UTC**, Datto BCDR customers experienced login issues when attempting to access the Datto Partner Portal and Recovery Launchpad.\u00a0\n\n\u00a0\u00a0\n\n**Root Cause:**\u00a0\u00a0\n\nDuring the onboarding of a firewall environment into centralized management, an unexpected configuration synchronization event created an inconsistent configuration state. This resulted in the removal of critical routing information, loss of some VPN authentication settings, and the creation of duplicate configuration entries, causing an internet outage, delaying VPN recovery for affected sites, and preventing a standard rollback. Manual remediation and restoration to the last known stable configuration were required to fully recover services.\u00a0\u00a0\n\n\u00a0\n\n**Incident Timeline:**\u00a0\u00a0\n\n* Identified: 2026-07-24 03:00 AM UTC\u00a0\u00a0\n\n* Public Notification: 2026-07-24 08:47 AM UTC\u00a0\u00a0\n\n* Resolved: 2026-07-24 11:29 AM UTC\u00a0\u00a0\n\n\u00a0\u00a0\n\n**Preventative Measures:** To reduce the likelihood and impact of similar incidents in the future, we are taking the following steps.\u00a0\u00a0\u00a0\n\n* Implement VPN traffic baseline monitoring and alerting to detect abnormal activity and enable faster issue identification.\u00a0\n\n* Define a rollback SOP with clear decision criteria and timelines for outages caused by software defects during planned maintenance.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "critical",
"last_seen": "2026-09-14T12:29:13Z",
"resolved_at": "2026-07-24T06:29:46.905-04:00",
"resolved_inferred": false,
"started_at": "2026-07-24T04:47:27.144-04:00",
"state": "postmortem",
"title": "Intermittent 500 Errors in Datto Partner Portal for Backup Products.",
"updated_at": "2026-08-05T14:05:39.292-04:00",
"url": "https://stspg.io/76bkbqxj7l5q"
},
{
"body": "# Summary: \n\nBetween 2026-07-23 14:44 UTC and 2026-07-23 19:41 UTC, KaseyaOne customers were unable to access the KaseyaOne Portal, and authentication into integrated applications that relied on KaseyaOne SSO was also impacted. \n\n# Root Cause: \n\nA network connectivity issue affecting the Microsoft Azure West US region caused service disruption for infrastructure supporting KaseyaOne. This resulted in loss of portal accessibility and SSO functionality until Microsoft restored regional connectivity. \n\n## Incident Timeline: \n\n* Identified: 2026-07-23 14:45 UTC \n* Public Notification: 2026-07-23 15:15 UTC \n* Resolved: 2026-07-23 19:41 UTC \n\n# Preventative Measures: \n\nTo reduce the likelihood and impact of similar incidents in the future, we are making Enhancements to Infrastructure Resiliency. Specifically: \n\n* Implementing a multi-region deployment architecture with designated primary and disaster recovery regions. This enhancement will reduce reliance on a single Azure region and improve service availability during regional infrastructure failures.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "critical",
"last_seen": "2026-09-13T12:30:53Z",
"resolved_at": "2026-07-23T17:19:29.116-04:00",
"resolved_inferred": false,
"started_at": "2026-07-23T11:15:08.000-04:00",
"state": "postmortem",
"title": "Microsoft Azure Outage in US West Impacting Multiple Kaseya Products",
"updated_at": "2026-08-10T11:31:43.185-04:00",
"url": "https://stspg.io/3nwjwghw4vj0"
},
{
"body": "**Datto Networking-\u00a0Web filtering policy changes fail to deploy to DNA and D200 appliances\u00a0\u2013 2026-07-17**\u00a0\n\n\u00a0\n\n**Summary:** Between **2026-07-17 10:37 PM UTC** and **2026-07-27\u00a002:45 PM UTC**, **Datto Networking** customers experienced an issue where web filtering configuration changes were not being successfully applied on the DNA and D200 appliances.\u00a0\n\n\u00a0\u00a0\n\n**Root Cause:**\u00a0\u00a0\n\nThe issue was traced to an application integration change that resulted in processing errors and prevented certain configuration updates from being applied successfully. An additional issue affecting the application of category-based configuration changes was also identified. Remediation for both issues was developed promptly.\u00a0\u00a0\n\n\u00a0\n\n**Incident Timeline:**\u00a0\u00a0\n\n* Identified: **2026-07-17 10:37 PM UTC**\u00a0\u00a0\n\n* Public Notification: **2026-07-23 02:37 PM UTC**\u00a0\u00a0\n\n* Resolved: **2026-07-27 02:45 PM UTC**\u00a0\u00a0\n\n\u00a0\u00a0\n\n**Preventative Measures:** To reduce the likelihood and impact of similar incidents in the future, we are taking the following steps.\u00a0 \u00a0\u00a0\n\n* Improve monitoring and alerting effectiveness to accelerate issue identification, streamline triage activities, and support service reliability.\u00a0\n\n* Complete the transition away from legacy infrastructure dependencies to improve platform resilience, reduce operational risk, and prevent similar issues from recurring.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "major",
"last_seen": "2026-09-14T12:29:13Z",
"resolved_at": "2026-07-27T10:45:18.495-04:00",
"resolved_inferred": false,
"started_at": "2026-07-23T09:37:48.578-04:00",
"state": "postmortem",
"title": "Datto Networking - Web Filtering Configuration Changes on DNA/D200 Devices Failed to Apply Successfully",
"updated_at": "2026-08-03T11:28:10.669-04:00",
"url": "https://stspg.io/nmz194029pmq"
},
{
"body": "This incident has been resolved.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "major",
"last_seen": "2026-09-09T12:30:34Z",
"resolved_at": "2026-07-23T05:24:53.284-04:00",
"resolved_inferred": false,
"started_at": "2026-07-23T04:22:22.298-04:00",
"state": "resolved",
"title": "Autotask PSA - UK03 - Error Messages Upon Navigating the UI",
"updated_at": "2026-07-23T05:24:53.298-04:00",
"url": "https://stspg.io/x6rkdxft5s94"
},
{
"body": "This incident has been resolved.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "major",
"last_seen": "2026-09-09T12:30:34Z",
"resolved_at": "2026-07-23T02:26:15.220-04:00",
"resolved_inferred": false,
"started_at": "2026-07-23T00:17:46.133-04:00",
"state": "resolved",
"title": "Service Degradation - DES1 DC",
"updated_at": "2026-07-23T02:26:15.240-04:00",
"url": "https://stspg.io/y5fhytsz05cj"
},
{
"body": "This incident has been resolved.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "major",
"last_seen": "2026-09-04T12:24:18Z",
"resolved_at": "2026-07-21T14:42:03.874-04:00",
"resolved_inferred": false,
"started_at": "2026-07-21T14:05:46.256-04:00",
"state": "resolved",
"title": "Datto SaaS Protection - Service disruption for customers hosted on node 'aue1-bfyii-2319'",
"updated_at": "2026-07-21T14:42:03.888-04:00",
"url": "https://stspg.io/51x4jh3tpjvf"
},
{
"body": "**Root Cause Analysis \u2013 Datto RMM Merlot Intermittent User Interface Degradation**\n\n**Summary**\n\nBetween **2026-07-21 07:55 UTC** and **2026-07-21 17:00 UTC**, some customers on the Merlot platform experienced intermittent performance degradation within Datto RMM. During this period, users may have encountered slow-loading or failing pages, missing Global Search results, delayed or incomplete device summary information, and intermittent issues accessing certain functionality within the web interface. Service stability was restored following a series of remediation activities targeting the affected messaging and application services.\u00a0\n\n**Root Cause**\n\nOur investigation determined that the incident was caused by instability within a core messaging service dependency path used by several Datto RMM components. This instability impacted communication between application services, resulting in elevated backend resource utilization and intermittent failures of customer-facing workflows. The issue was further compounded by the persistence of unhealthy service connections from the recent incident the day prior, which contributed to message processing delays and reduced application responsiveness. Recovery required restarting the affected messaging infrastructure and dependent services, along with infrastructure adjustments to restore normal operation.\n\n**Incident Timeline**\n\n* Identified: 2026-07-21 07:55 UTC\n* Public Notification: 2026-07-21 08:55 UTC\n* Incident Monitoring: 2026-07-21 10:06 UTC\n* Additional Investigation: 2026-07-21 15:09 UTC\n* Resolved: 2026-07-21 17:14 UTC\n\n**Preventative Measures**\n\nTo reduce the likelihood and impact of similar incidents in the future, we are taking the following actions:\n\n* **Enhancing infrastructure resiliency** by improving service recovery mechanisms so dependent services can recover automatically when messaging infrastructure is restored, reducing the risk of cascading failures across connected services.\n\n* **Enhancing monitoring and alerting** by implementing additional monitoring for messaging service health, queue backlog growth, and end-to-end workflow execution so potential issues can be identified and resolved before customer impact occurs.\n\n* **Enhancing customer experience monitoring** by introducing workflow-based monitoring and dashboards focused on key customer journeys, allowing earlier identification of degraded user experiences within the platform.\n\n* **Enhancing incident management and response** by developing and documenting recovery procedures for messaging-path degradation scenarios, including validation steps to ensure all related services are operating normally before an incident is considered resolved.\n\n* **Enhancing post-incident validation** by adding additional dependency-aware validation checks following major recovery activities to confirm the health of interconnected services and reduce the likelihood of follow-on incidents.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "major",
"last_seen": "2026-09-08T12:29:58Z",
"resolved_at": "2026-07-22T07:51:32.274-04:00",
"resolved_inferred": false,
"started_at": "2026-07-21T04:55:34.259-04:00",
"state": "postmortem",
"title": "Datto RMM - Merlot - Slow loading pages across the Web Application, Audit attempts are unsuccessful",
"updated_at": "2026-07-28T16:21:17.591-04:00",
"url": "https://stspg.io/cv0smq62cyny"
},
{
"body": "This incident has been resolved.",
"first_seen": "2026-09-04T07:06:16Z",
"impact": "minor",
"last_seen": "2026-09-08T12:29:58Z",
"resolved_at": "2026-07-22T10:18:49.018-04:00",
"resolved_inferred": false,
"started_at": "2026-07-08T08:37:14.386-04:00",
"state": "resolved",
"title": "Datto SaaS Protection - Backup performance degradation for some SharePoint/Teams services on pod 'gbe2-saas-p0'",
"updated_at": "2026-07-22T10:18:49.035-04:00",
"url": "https://stspg.io/cql6f53l265j"
}
]
}