We’ve updated the backup retention policy for managed AWS Lightsail instances. Automatic snapshots now follow a Grandfather-Father-Son scheme:

• Daily: 1 snapshot per day, kept for 7 days
• Weekly: 1 snapshot per week, kept for 4 weeks
• Monthly: 1 snapshot per month, kept for 2 months

Older snapshots are deleted automatically. The oldest available restore point is about 2 months old.

Yearly snapshots discontinued: To manage costs, we’ve removed the yearly snapshot. It was rarely, if ever, used and added significant storage costs.

Region: All backups are stored in the same AWS region as your instance. If you need cross-region backups, please contact us for an estimate.

If you need longer retention or a snapshot before a planned change, please open a ticket.

Effective: Oct 1 2026

Updated: Oct 10 2026

We’ve updated the notification settings on Plesk-powered servers to be more detailed. This gives you better visibility into the automated tasks Plesk now performs and helps us catch potential issues sooner.

What this means for you: You’ll now receive all administrative notices from Plesk, so you may see new or more frequent messages. This is expected and caused by this change.

What rackAID monitors: We also receive update, SSL, overuse, and security notices. We do not monitor routine account changes such as modifications or suspensions. Those notices are for your information only.

If these notifications cause problems or you’d like them adjusted, please open a ticket and let us know.

Snapshot Retention — Managed AWS Instances

Where backup services are included in your Order, we retain system snapshots for managed AWS instances on a Grandfather-Father-Son (GFS) schedule:

• Daily: 1 snapshot per day, retained for 10 days
• Weekly: 1 snapshot per week, retained for 4 weeks
• Monthly: 1 snapshot per month, retained for 2 months
• Yearly: 1 snapshot retained annually

Snapshot rotation and pruning run weekly rather than daily, so daily snapshots may persist somewhat longer than the nominal 10-day window before they are trimmed. This is expected behavior and does not reduce the guaranteed minimum retention at each tier.

Regardless of any backup service purchased from us, you remain responsible for maintaining your own backups per the Master Service Agreement (MSA §13.2(v)) and for exporting or retrieving your data before termination (MSA §12.1.1).

Security Notice: CVE-2026-31431 ("Copy Fail")

A high-severity Linux kernel privilege escalation vulnerability known as Copy Fail (CVE-2026-31431) was publicly disclosed on April 29, 2026.

The flaw affects the kernel's `algif_aead` crypto interface and allows a local user to gain root access.

CISA added it to the Known Exploited Vulnerabilities (KEV) catalog on May 1, 2026 after observing active exploitation.

All servers under our management have been either patched with the fixed kernel or have appropriate mitigations applied. 

Servers were rebooted as part of this process.

We've verified each system across our fleet and confirmed protection against the published exploit.

No customer action is required.

References:
- CISA KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
- CISA advisory: https://www.cisa.gov/news-events/alerts/2026/05/01/cisa-adds-one-known-exploited-vulnerability-catalog
- NVD entry: https://nvd.nist.gov/vuln/detail/CVE-2026-31431

If you have any questions, please open a support ticket.

Cloudflare Incident – Summary