What Canonical's October 8 statement says was down

What happened

On October 8, 2026, Canonical said on Ubuntu Discourse that its websites were under a sustained distributed denial-of-service attack. SecurityWeek, reporting that sentence on October 12, says the disruption was limited to primary web properties: ubuntu.com, canonical.com, the blog, the developer site, and the security advisory pages and API. Launchpad and the Snap Store did not appear affected. Canonical said on October 9 that most properties were accessible again. No public size or origin is in these accounts, and no one took credit in the reports used here. The page filing them is Futureweb.

What the accounts agree on

SecurityWeek and OMG Ubuntu agree that the main sites were the ones disrupted, that the disruption was measured in hours rather than days, and that package infrastructure people use to install software largely stayed up. OMG Ubuntu puts the downtime at 4 hours and 12 minutes and says PPAs, CD images, Launchpad, Snap, and single sign-on stayed operational. A content address, which is a different way to name a file, is what a content address is.

Where the ISO sentence splits

Phoronix, on October 8, says ISO downloads were inoperable. OMG Ubuntu says the CD image server stayed up. Those are not the same claim, and this page will not average them into a single status. A reader who needed an image that day has two reports and no Canonical sentence, in the texts used here, that picks one. The desk is Distributed Cloud.

Why it matters on this desk

The dependency is which names resolved to a page and which services the accounts say did not go down. It is not a diagram of the attack, and it is not a claim that a local replica would have changed the afternoon. The spring incident, which SecurityWeek says was larger and reached Launchpad and the Snap Store, is a different day. A partition, a different failure, is what a partition does to a write.

What this page will not import

SecurityWeek says a group claimed the spring incident and that any connection to October is unclear. This page omits the name. A claim about April is not an attribution for October. A separate monitor's note about ubuntu-archive on October 12 is also a different event and is not folded in. The security desk, for an advisory rather than a site status, is Security.

What came back

Canonical's October 9 statement, as reported, is that most of the affected properties were accessible again. OMG Ubuntu says the episode resolved. Neither account prints a packet rate, a source network, or a postmortem with a root cause. The fact a reader can check is the status sentence: the sites were attacked, the main names were the ones hit, and they were described as back the next day.

What to watch next

A Canonical postmortem that states whether image downloads were up would close the split. A size or an origin, if the company publishes one, would be a new fact. Another outlet repeating the Discourse sentence would not. The October 8 statement is the company's sentence. The three reports are the check, including the disagreement. The properties SecurityWeek lists are ubuntu.com, canonical.com, the blog, the developer site, and the security advisory pages and API. Launchpad and the Snap Store are the services those accounts say did not appear affected. OMG Ubuntu adds PPAs and single sign-on to the list that stayed up, and times the outage at 4 hours and 12 minutes. Phoronix's ISO sentence is the disagreement, filed beside OMG Ubuntu's claim that the CD image server stayed up. No packet rate and no source network are in the three reports. The spring incident reached further, on SecurityWeek's account, and any link to October is described as unclear. This page will not supply the missing link or the missing attacker. A local copy of a package is a different dependency from whether ubuntu.com answered. Four hours, as OMG Ubuntu timed it, is the duration on file. A size, an origin, and an October claimant are not. The image-download split stays open on purpose.

What would change the record

If Canonical says the image server was down, Phoronix's sentence becomes the one the company adopted. If Canonical says it was up, OMG Ubuntu's sentence does. Until then both stand. If a later notice ties October to the spring incident with evidence, the unclear connection becomes a finding. This page will not write that tie in advance.

What stays a status

What stays specific is an October 8, 2026 statement, quoted from Ubuntu Discourse by SecurityWeek, that Canonical's websites were under a sustained distributed denial-of-service attack, limited in these accounts to the primary web properties, with Launchpad and the Snap Store apparently unaffected. Canonical said on October 9 that most were accessible again. OMG Ubuntu times the outage at about four hours and says the image server stayed up. Phoronix says ISO downloads were inoperable. No size, no origin, and no October claimant are in the reports this page uses. The spring incident stays a prior event. The checkable fact is which names were disrupted and that the accounts do not agree about the image files.