Outage in Pagely

Security Alert for customers using CircleCI with Pagely.

Resolved Maintenance
January 09, 2023 - Started almost 2 years ago - Lasted 11 days
Official incident page

Need to monitor Pagely outages?
Stay on top of outages with IsDown. Monitor the official status pages of all your vendors, SaaS, and tools, including Pagely, and never miss an outage again.
Start Free Trial

Outage Details

CircleCI recently disclosed a security event on their blog: https://circleci.com/blog/january-4-2023-security-alert/ The nature of the disclosure relates to potential compromise of all secrets stored within a repository on the CircleCI platform. While CircleCI has taken steps since the initial disclosure to automatically rotate what they can for you, there are certain things that rely on you to fully resolve the matter. We urge customers using CircleCI to take the following steps as soon as possible: - Immediately rotate any and all secrets stored in CircleCI. There's a tool available to fetch all of your secrets from CircleCI. (https://github.com/CircleCI-Public/CircleCI-Env-Inspector) - Delete and re-create any CI/CD Integrations or Webhook configurations in Atomic if they were used with CircleCI. Full documentation can be found here: https://support.pagely.com/hc/en-us/articles/360050828232-Automatically-Deploying-Your-WordPress-Site-with-CircleCI - after recreating your integrations, you will need to update the integration ID and secret within your pipeline configuration. - If you are using SSH keys to perform any deployments, please regenerate those as well. If you have any questions or concerns regarding this event, please do not hesitate to Contact Pagely Support: https://support.pagely.com/hc/en-us/articles/114094215332-Contacting-Support
Components affected
Pagely CI/CD Integrations
Latest Updates ( sorted recent to last )
RESOLVED almost 2 years ago - at 01/21/2023 12:45AM

This security alert is now resolved. We still urge customers to take action on the steps we outlined within this status alert. Additionally, CircleCI posted an update on January 13th with a full incident report:

https://circleci.com/blog/jan-4-2023-incident-report/

MONITORING almost 2 years ago - at 01/09/2023 10:53PM

CircleCI recently disclosed a security event on their blog: https://circleci.com/blog/january-4-2023-security-alert/

The nature of the disclosure relates to potential compromise of all secrets stored within a repository on the CircleCI platform.

While CircleCI has taken steps since the initial disclosure to automatically rotate what they can for you, there are certain things that rely on you to fully resolve the matter. We urge customers using CircleCI to take the following steps as soon as possible:

- Immediately rotate any and all secrets stored in CircleCI. There's a tool available to fetch all of your secrets from CircleCI. (https://github.com/CircleCI-Public/CircleCI-Env-Inspector)
- Delete and re-create any CI/CD Integrations or Webhook configurations in Atomic if they were used with CircleCI. Full documentation can be found here: https://support.pagely.com/hc/en-us/articles/360050828232-Automatically-Deploying-Your-WordPress-Site-with-CircleCI - after recreating your integrations, you will need to update the integration ID and secret within your pipeline configuration.
- If you are using SSH keys to perform any deployments, please regenerate those as well.

If you have any questions or concerns regarding this event, please do not hesitate to Contact Pagely Support: https://support.pagely.com/hc/en-us/articles/114094215332-Contacting-Support

Start monitoring all your vendors in just 5 minutes

With IsDown, you can monitor all your critical services' official status pages from one centralized dashboard and receive instant alerts the moment an outage is detected. Say goodbye to constantly checking multiple sites for updates and stay ahead of outages with IsDown.

Start free trial

No credit card required · Cancel anytime · 3278 services available

Integrations with Slack Microsoft Teams Google Chat Datadog PagerDuty Zapier Discord Webhook

Setup in 5 minutes or less

How much time you'll save your team, by having the outages information close to them?

14-day free trial · No credit card required · Cancel anytime