CANONICAL’S websites were disrupted by a sustained distributed denial-of-service (DDoS) attack, marking the second such incident this year. The firm confirmed on 8 October that “Canonical’s websites are under a sustained distributed denial of service attack,” with some services potentially unreachable at times. The outages affected Canonical’s main web properties, including ubuntu[.]com, canonical[.]com, the Ubuntu blog and developer site, and the Ubuntu security advisory pages and API. Developer-facing services such as Launchpad and the Snap Store appear to have remained unaffected.
Evidence from the outage suggests a limited, public-facing disruption rather than a broad, cross-service collapse. OMG! Ubuntu reported the impact, with downtime estimated at a little over four hours before most services were accessible again. Canonical did not publicly disclose the attacker’s size, method beyond the DDoS label, or whether the incident is linked to the earlier April attack, which disrupted Launchpad and the Snap Store and was claimed by the group The Islamic Cyber Resistance in Iraq – 313 Team.
The company has not attributed any group to the October incident, and there is no public claim of responsibility. Practical responses have involved restoring affected services, though Canonical has not released detailed technical indicators or remediation steps.