Status
Last updated: 21 October 2026, 18:17 CEST
We know that the current limitations affect your work. That is why we keep you informed here, transparently and regularly, about which systems are affected, what we are doing and when you can expect the next update.
Relution is currently the target of targeted attacks. Our team is working hard to ensure the security of our systems and your data. As a precaution, we have therefore shut down or limited individual services.
We will keep you informed about every step of progress on this page.
Security incident on live.relution.io of 14 October 2026 – all updates
Final result: no personal or customer data exfiltrated
17 October 2026, 16:30 CEST
As announced, we are informing you today of the final result regarding the security incident of 14 October 2026 on live.relution.io. The good news first: neither personal data nor customer data has been lost.
Result of the forensic analysis
The forensic analysis has been completed. It has confirmed that no personal or customer data was exfiltrated in the course of the incident.
Only configuration data of our infrastructure was accessed. We replaced this data immediately, rendering it unusable.
Measures taken
- The exploited security vulnerability has been closed.
- Sending emails and creating new Relution accounts remain temporarily restricted.
Affected systems
On-premises instances as well as dedicated servers in the Relution Cloud were not affected by the incident.
Status of your instance – live.relution.io
Your Relution instance is fully available and is in the same state as before the incident. All configurations, settings and data have been preserved unchanged. No further action is required on your part.
Note on your obligations as controller
As no personal data was exfiltrated, in our view there is no risk to the rights and freedoms of data subjects. The final assessment with regard to Art. 33 and 34 GDPR is your responsibility as controller. We will be happy to provide you with further information for your documentation.
Questions
With the analysis completed, we are once again fully available to answer your questions – please do not hesitate to contact us.
Thank you very much for your patience and trust over the past few days. We regret the inconvenience caused.
Interim update: analysis in its final stages
16 October 2026, 16:15 CEST
As announced, we are informing you about the current status of the security incident of 14 October 2026, which we notified you of on 15 October 2026.
Status of the analysis
The forensic analysis is in its final stages. Based on our current knowledge, there is no indication that any data was exfiltrated in the course of the incident.
Measures taken
- The exploited security vulnerability has been closed.
- Sending of emails has been restricted.
- The creation of further (new) Relution accounts has been restricted.
Affected systems
On-premises instances as well as dedicated servers in the Relution Cloud are not affected by the incident.
Status of your instance – live.relution.io
Your Relution instance is fully available again and is in the same state as before the incident. Only the sending of emails is still temporarily suspended. All configurations, settings and data have been preserved unchanged. No further action is required on your part.
Note on your obligations as controller
As there is currently no indication of data exfiltration, we currently see no increased risk to the rights and freedoms of data subjects. The final assessment with regard to Art. 33 and 34 GDPR remains your responsibility as controller. We will be happy to provide you with further information for your documentation.
Next steps
Once the analysis has been completed, we will inform you of the final result without being asked.
As we will inform you comprehensively and without being asked once the analysis has been completed, we kindly ask you to refrain from individual inquiries until then. This allows us to concentrate fully on concluding the investigation quickly.
Thank you for your patience and understanding. We regret the inconvenience caused.
Initial information on the possible security incident
16 October 2026, 11:00 CEST
We have detected indications of a possible security incident on our instance live.relution.io. Based on current knowledge, there is no evidence that any other Relution instances are affected. This applies both to instances in the Relution Cloud and to self-hosted installations.
Immediately after receiving these indications, we initiated emergency measures to limit any possible impact and to prevent unauthorized access.
What we are currently doing
- Forensic analysis: Together with external specialists, we are conducting a comprehensive investigation of the incident and securing all relevant evidence. The goal is to determine beyond doubt whether customer data is affected. At present, there is no indication of this.
- Close coordination with our data protection officer: The incident is being processed in cooperation with our data protection officer and external service providers.
- Additional protective measures: We are implementing additional security mechanisms to further secure our systems.
- Around-the-clock operation: Our team is working intensively and 24/7 to ensure the security and availability of our services.
How we keep you informed
We will actively keep you up to date. Should it turn out that personal data, credentials, managed devices or any other of your data are affected, we will contact you immediately and directly. You do not need to take any action yourself.
Our commitment
We take this incident, like every security-relevant incident, very seriously. Our information security officer will fully review the incident. The insights gained will continue to flow into the further development of Relution over the coming weeks and months and beyond, to make our product even more secure and reliable.
Please visit this page regularly and subscribe to our newsletter → to always stay informed about the current status.
Thank you for your trust and understanding.
Your Relution team
System Status
Software Status
What You Should Do Now
- Install updates immediately: Please install all provided updates right away. Which versions are affected and which updates are available is described in our Security Advisories →.
- Actively monitor your systems: Keep a particularly close eye on your Relution environment over the next few days. Good starting points are the audit log →, monitoring and the server logs →.
- Watch for unusual activity among users and devices: Check carefully whether new users, administrators or devices have been added that you did not create or enroll yourself. Also watch existing user accounts for unusual behavior, for example logins at unusual times, roles or permissions that were extended afterwards, newly created access tokens, or changes to policies, apps and devices that no one on your team made. The audit log → shows who made which change and when. Such anomalies can indicate unauthorized access.
- Review security settings: Our recommendations for securing your Relution environment → help you protect your system further.
- Noticed something? First document suspicious entries with screenshots. Then delete suspicious devices; suspicious user accounts should at least be deactivated. Please contact security@relution.io → immediately and include the screenshots so that we can evaluate the incident together with you.
This information is updated as needed.