Cloud 66 Team hello@cloud66.com via mail123.us2.mcsv.net<p>URGENT:<p>We have just identified a malicious activity on Cloud 66.<p>To protect your servers change your API keys and enable termination protection on AWS accounts you have.<p>We strongly recommend changing all cloud keys.<p>We have shut down the site and will keep you posted.
DigitalOcean locked all Cloud 66 API accounts on their side a few days ago. There's more information about it on the second post here — <a href="http://digitaloceanstatus.com/" rel="nofollow">http://digitaloceanstatus.com/</a><p>Essentially it looks like somebody on Cloud 66s side found a way to remotely destroy hundreds of instances.
Looks like there was a security incident 2 days ago and now they believe that the problem is a data leak and not poor application security: <a href="http://blog.cloud66.com/" rel="nofollow">http://blog.cloud66.com/</a>