All impacted parties have been notified directly by email.

The breach happened through a compromised admin password - a password unique to the shop and not used elsewhere.

No other systems have been impacted and the shop was on a completely segmented network.

The shop will remain offline for the immediate future.

shop.almalinux.org had a malicious plugin installed today through a compromised WordPress admin password. We are investigating and will share more details soon.

shop.almalinux.org is in no way connected to any other part of AlmaLinux infrastructure so the impact is only to data contained within shop.almalinux.org.

The AlmaLinux web shop is currently offline.