Dear customers and well-wishers:
We have turned the corner. We fought back over a week of repeated criminal DDoS attacks designed to disrupt the services we offer our customers. Our services are now back to normal, although there are still several customers with hiccups that we are working hard to fix. We are stronger, but we continue to remain very vigilant.
But first, we want to thank you – our customers. The overwhelming support we had from all of you during this crisis was absolutely humbling. Many of you suffered large disruptions to your businesses. Many of you who host your sites with us were down. Email did not work for many of you. Like us, you couldn't reach your customers. You had an emergency of your own, your own crisis. Despite all this, the vast majority of you understood the extreme circumstances, believed in our sole intent and desire to get you up and running again, and put your faith in us. The many messages of support and encouragement we received from you stiffened our resolve to deny the criminals what they sought.
You were there when we needed you most. We thank you deeply.
The attacks were intermittent over six days and there were several of them. We had started to mitigate them even around the second or third attack, although we chose not to make this public at that time. We knew that such attacks are often cover for other attacks intended to infiltrate networks and steal or compromise data. We watched for them. None were detected and no data was ever breached. A demand for a ransom followed each attack. We refused to pay. We never will.
During and since the attacks, we erected several and multiple defenses in our infrastructure. We continue to work with multiple vendor solutions, including our own, to build safeguards and layers of defense. For all the obvious reasons, we will not discuss these methods publicly. We live in a world where such attacks will likely get more frequent. Just as we get more sophisticated, so will future attackers. But you can rest assured that we will spare nothing to protect Zoho and you from them.
We owe huge thanks to our own teams. This was during the biggest festival of India – Diwali – but for seven days all hands were on deck, round the clock. Product managers took on customer support. Software engineers and architects joined network and infrastructure engineers, so we make better decisions. Caterers wrote code. (OK, so that last part is an exaggeration!). Our internal communication channels were impeccable. Externally, we did our best to bring you timely and honest updates. Our CEO Sridhar was running amuck on Twitter, taking customer questions, providing updates, even troubleshooting technical issues for them on the fly! It will take a much bigger storm to halt him. We are hugely fortunate to have an abundance of talent and resolve in our people.
We have certainly come out stronger at the end of this tunnel. Our infrastructure, our people, and our processes are much more hardened. Our services are back to normal and we will do everything to keep them that way. We will continue to work with the many of you who still have service issues that need resolution. Please continue to use the support lines and Twitter (@zoho) to reach out to us. We will be on them.
We thank you once again for your patience and support at a time when it really counted. We'll do everything to repay your trust and make sure you will continue to stay with us. And we will do it the way we know best - by building the best products to serve you.
I applaud your level of transparency and consistent updates. As a Zoho Partner, I can't begin to express how important this was to me, as well as my clients. Please express my gratitude to the entire team for their dedication and hard work at overcoming what could have been a much worse scenario. Zoho does care! Sheri
Very happy that you've come out the other end of this dark tunnel. Times like this show you what you and your team are made of - you'll only be stronger from here. Godspeed! :)
We confirm that our technology partner is doing their utmost to make their application suite more secure. As as partner we will assist them in a back to back formation to protect your data. Thank you Zoho for this update. Best regards, Zoho Alliance Partner INTERNET OVERAL The Netherlands
Wow! You guys are amazing and I am so glad to have you guys as an email host. Was with you through it and I'm glad you came out stronger!!! This post is the reason why you guys are such a great company! Thank you for always keeping us updated and your customer service top-notc.
Congratulations for your hard work, thanks for your support.
In the face of a crisis the Zoho team did great. Sure it was frustrating on our end as a client but we also understood that the frustration on your end was so much greater. I truly value the two way relationship I've had with Zoho over the last many years and look forward to the same in the future.
Very bold move Zoho.. ! As a security Industry guy, i respect the transparency you maintained through out the time. You're supposed to teach the fellow SaaS world how to do this bold move. It comes with culture, keep up the spirit. All good things comes to an end ;-) Great that too much of code writing even by your caterers ended now after this one week ordeal. Hope the DDos naragasuran got killed, finally.. Thanks, Shan Chief Nixerhttp://FixNix.co In the mission to democratize GRC space..
Congratulations Zoho! Through all your internal troubles you found the time to support and inform your customers in a more than timely and courteous manner. I have always had GREAT support from Zoho for almost two years on a variety of questions! Thank you for being there for us and having the approach that you do. Transparency, honesty, integrity!