21 Oct 2026
TeamUpdraft breach exposes UpdraftCentral keys that can command WordPress sites
Customer records, hashed passwords and connection keys for UpdraftCentral, UpdraftVault and UpdraftClone were taken in a weekend intrusion.…
TeamUpdraft is the Newport, Wales company behind UpdraftPlus, WP-Optimize, All-In-One Security, UpdraftCentral and Burst Statistics, WordPress plugins it says run on more than 5 million websites.
TeamUpdraft is a UK company that develops plugins and services for WordPress websites. Its best-known product, UpdraftPlus, backs up, restores and migrates WordPress sites, and the company says its plugins are installed on more than 5 million WordPress websites worldwide.
UpdraftPlus is the backup plugin, with a free edition and a Premium edition. It sends backups to the site owner's own remote storage, such as Google Drive, Dropbox or Amazon S3, or to UpdraftVault, the company's own storage service. UpdraftClone creates temporary copies of a site for testing, using client keys. UpdraftCentral lets agencies and owners manage the plugins, updates, backups, users, pages and posts of many WordPress sites from one place, either as a cloud service or self-hosted.
Alongside them, WP-Optimize caches pages, cleans the database and compresses images to speed sites up, All-In-One Security adds firewall rules and login protection, and Burst Statistics provides privacy-friendly analytics. The company also lists Internal Link Juicer, WPGetAPI and WP Overnight among its plugins.
Its users range from single site owners on the free plugins to designers, developers and agencies managing many client sites, and web hosts, for whom it offers WordPress solutions. In October 2026 UpdraftPlus passed 4 million active installations.
Over the weekend of 17 and 18 October 2026 the company found unauthorised access to teamupdraft.com and its customer database, including connection keys for UpdraftCentral, UpdraftVault and UpdraftClone. It released UpdraftPlus 1.26.13 and 2.26.13 to revoke old UpdraftCentral connections and reported the incident to the Information Commissioner's Office.
Registered address: Tramshed Tech, Griffin Place, High Street, Newport, Wales UK company number: 8570611 Products: UpdraftPlus, UpdraftCentral, UpdraftVault, UpdraftClone, WP-Optimize, All-In-One Security, Burst Statistics
Profile written by TrustList from the business's own published information, Oct 2026.
An earned signal from verification, reviews, awards, transparency and engagement - the vendor can't buy it.
Updated 10/21/2026
Used it? Your experience helps other buyers decide.
Write a reviewNo questions yet. Be the first to ask about TeamUpdraft.
Everything here links back to the same verified catalogue. Pick your next stop.