If you’re considering purchasing any service from this terrible company, run away before it’s too late. They will cause you endless stress, pain, and eventually, cost you your wealth. Let me explain how ServerMania destroyed everything we spent 11 years building.

ServerMania performed emergency power maintenance on 7th October 2024, between 3:00 PM and 4:00 PM EDT. During this period, our main server, which hosted our website, was hacked and encrypted with ransomware known as JungleSec. Even worse, our backup server, located at a completely different physical ServerMania location with separate usernames, login credentials, and more, was also hacked.
We contacted ServerMania, but they claimed everything was functioning smoothly on their end and suggested we restore our website using backup data, which had also been hacked and encrypted.

After conducting an internal investigation, we found that the hacker had accessed the server via a vulnerability in ServerMania’s IPMI hardware. The evidence strongly suggested that this hardware wasn’t properly configured, allowing hackers to take control of our servers with default credentials.

It became apparent that this was likely a company-wide attack, affecting multiple servers across various physical locations. Initially, ServerMania denied any hacking or issues, constantly advising us to restore from backup, even though those backups were also encrypted. After persistent pressure, they finally admitted to the hacking attack and informed us that they had disabled the IPMI hardware “to prevent further problems.”

ServerMania then requested we provide the ransom payment file and an encrypted file, hoping they could decrypt the data, but their attempts failed. No data was recovered. Subsequently, ServerMania issued an ‘Urgent Security Notice’ acknowledging the IPMI security threat and stating that JungleSec ransomware was exploiting IPMI vulnerabilities to gain unauthorized server access. They confirmed they had disabled IPMI access to all affected servers to mitigate the risk. This admission confirmed that the vulnerabilities in ServerMania’s infrastructure, created by them, were responsible for the hacking.

In a pitiful attempt to address the issue, ServerMania offered us a one-month free subscription as compensation—an insult considering the scale of the damage.

Prior to the attack, we had already experienced numerous issues, including servers shutting down without explanation and previous emergency power maintenance incidents. The hacker attack took place during a second maintenance window, suggesting that ServerMania may have known about the IPMI hardware vulnerabilities for months but failed to inform us, leaving our data exposed.

Very importantly, ServerMania not only failed to inform us about their hardware issues, but they also never asked for or received our permission to install IPMI hardware on our server.

This catastrophic breach wiped out over 95% of our active users and around 90% of our content, including payment data and personal profiles. The thriving user community we had built over 11 years was destroyed, leaving our business and reputation in ruins with no viable solution for recovery.

To make matters worse, their customer support team was utterly useless. They repeated the same unhelpful information in broken English, wasting our time and making a horrible situation even more stressful.

Our legal team is now investigating several options, including media actions, to mitigate the damage caused by ServerMania.

To anyone reading this, whether you’re a current or prospective client of ServerMania, steer clear before they destroy your company and possibly your entire livelihood.

If anyone needs clear material evidence regarding these claims and how ServerMania caused and admitted to creating vulnerabilities that hackers exploited, feel free to contact me.