Neto by Maropost Status Page

Oct 7, 2026 · resolved Oct 7

Syncs have returned to normal.

Oct 6, 2026 · resolved Oct 6

This incident has been resolved.

Oct 5, 2026 · resolved Oct 5

Scheduled Maintenance We will be completing an account security update for Maropost Identity tonight 5/10/2026. Following this update, all Maropost Identity users will be required to complete an account security reset the next time they log in. Users will be prompted to: - Set a new password using Forgot Password - Save a new set of recovery codes - Configure their authenticator app - Complete Multi-Factor Authentication (MFA) setup Existing recovery codes and authenticator configurations will be reset as part of this process. MFA will be required for all Maropost Identity users going forward, including users who have not previously configured an authenticator. No action is required before the update. Users should follow the instructions presented when they next access Maropost Identity. For more information about the password reset, recovery codes and MFA setup, please refer to our guide: https://galaxy.maropost.com/kb/articles/2475-maropost-identity-password-reset-what-you-need-to-do If you experience any difficulty completing the reset, please contact Maropost Support.

Sep 30, 2026 · resolved Sep 30

# Maropost Identity – Security Incident Postmortem ‌ **Affected Service:** Maropost Identity \(Login and Authentication\) **Incident Period:** 26–30 September 2026 **Remediation and Global Credential Reset Completed:** 6 October 2026 **Status:** Resolved ## Overview Between 26 and 30 September 2026, Maropost identified unauthorised activity involving Maropost Identity, the authentication service used to securely access Maropost products. Our investigation determined that an external party exploited a security vulnerability within the identity service, allowing unauthorised administrative access. **Importantly, user passwords are stored using secure, one-way cryptographic hashing. Our investigation found no evidence that stored password hashes were extracted or that plaintext passwords were exposed.** Upon identifying the activity, our Engineering and Security teams took immediate action to contain the incident, investigate its impact and implement corrective measures. The identified vulnerability has since been remediated, and a global credential reset was completed on 6 October 2026 as a precautionary security measure. ## What Happened The incident involved a vulnerability within the password-reset functionality of Maropost Identity. This vulnerability was exploited by an unauthorised third party, who subsequently gained elevated access within the identity service. Our investigation identified the following activity: * Unauthorised access to identity account information, including user names and email addresses. * An unusually high volume of password-reset requests across customer and internal accounts. * Unauthorised changes to login credentials and multi-factor authentication \(MFA\) settings on a subset of accounts. Our teams identified abnormal activity on 30 September 2026 and took immediate action to investigate and contain the incident. ## Customer Impact Our investigation identified unauthorised access to Maropost Identity account information, including user names and email addresses. While unauthorised credential and multi-factor authentication \(MFA\) changes were identified on a subset of accounts, Maropost subsequently invalidated existing sessions and completed a global credential reset to protect users. ## Actions Taken to Resolve the Incident Following detection, Maropost's Engineering and Security teams implemented several measures to contain the incident and secure the identity service. **Security Vulnerability Remediation** The affected identity software was upgraded, and verification testing was conducted to confirm the identified vulnerability had been addressed. **Unauthorised Access Containment** Network sources associated with the suspicious activity were blocked, and administrative access controls were strengthened. **Credential and Session Security** Existing user sessions were invalidated, relevant application and integration credentials were rotated, and administrative accounts were reviewed. **Global Password and MFA Reset** On 6 October 2026, Maropost completed a global reset of user passwords, MFA configurations and recovery codes to eliminate the risk of continued access through previously modified credentials. **Account Verification** Additional account reviews were undertaken, including the disabling of unverified accounts identified during the investigation. ## Preventive Measures In addition to the immediate remediation, Maropost is implementing further security improvements to strengthen Maropost Identity and reduce the risk of similar incidents. These improvements include: * Strengthening administrative access restrictions and authentication controls. * Enhancing monitoring and alerting for unusual login and password-reset activity. * Improving application and integration security controls. * Strengthening vulnerability management and software update processes. * Conducting additional security assessments and reviewing incident response procedures. These measures form part of our ongoing commitment to maintaining the security and reliability of Maropost services. ## Do Customers Need to Take Any Action? Customers who successfully reset their Maropost Identity password and reconfigured their multi-factor authentication on or after 6 October 2026 do not need to repeat that process as part of this incident. Customers who have not yet completed the required reset should select **Forgot Password** on the Maropost Identity login page and follow the instructions provided. As a general security precaution, we encourage customers to remain vigilant for unexpected password-reset requests, suspicious emails or attempts to obtain account credentials. Maropost will never request that customers disclose their passwords or MFA recovery codes. For further guidance, please refer to: [Maropost Identity password reset – what you need to do](https://galaxy.maropost.com/kb/articles/2475) If you experience difficulty accessing your account or identify unexpected account activity, please contact our Support team: [Contact Maropost Support](https://galaxy.maropost.com/contact-support) ## Closing Statement Protecting our customers, their accounts and their information remains a priority for Maropost. We recognise the importance of maintaining trust in our services and have taken steps to address the identified vulnerability, secure affected authentication credentials and strengthen the controls protecting Maropost Identity. We will continue reviewing and improving our security practices as part of our ongoing commitment to safeguarding customer information.

Aug 17, 2026 · resolved Aug 17

## What happened A feature configuration was enabled for some Neto stores before the corresponding application changes had completed deployment to the production environment. This created an unexpected state for those stores and prevented users from successfully loading the Control Panel after login. ## Impact Affected merchants were temporarily unable to access their Neto Control Panel. The issue was limited in scope, with no broader Neto platform disruption identified. ## Resolution Once the cause was identified, the feature configuration was disabled for the affected stores, restoring Control Panel access. Our teams then monitored the affected environments to confirm that Control Panel access and supporting services remained stable. ## Preventive actions To reduce the likelihood of this occurring again, we are strengthening the deployment process around feature configuration changes. This includes: * Verifying that the required application version has been fully deployed before enabling associated features. * Adding additional checks around deployment and configuration sequencing. * Performing validation and smoke testing immediately following feature activation. * Improving coordination and confirmation of production deployment status before configuration changes are rolled out. We apologise to the merchants affected by this disruption and appreciate their patience while our teams worked to restore access.

Is Neto by Maropost down right now?

No — Neto by Maropost is up. All systems operational as of Oct 12, 7:47 AM UTC.

What is Neto by Maropost's current status?

Neto by Maropost: All Systems Operational. Alert24 checks Neto by Maropost's status page continuously and can notify you the moment it changes.

How do I get alerted when Neto by Maropost goes down?

Alert24 monitors Neto by Maropost and 3,700+ other cloud and SaaS providers. When an outage is detected it updates your status page automatically and pages your on-call team — no manual checks. Start free at alert24.net.