Vendor reports: degradedResolved · vendor status “resolved”Official status API

Security Advisory: Unauthorized Access to Customer Accounts via a Look-alike Sign-in Page

Reported by Pantheon · Hosting, CDN & Edge · source last read 4 min ago

Official source (opens in a new tab)
Vendor start
Sep 12, 2026, 16:58 UTC
Vendor's clock
Resolved
Sep 15, 2026, 19:51 UTC
Vendor's clock
First seen by Statuswall
Before tracking began
Statuswall's clock
Duration
3 d 2 h
From vendor start and resolution

Summary

Built from the facts below, no AI

Potential impact, not a confirmed outage of your systems.

What the vendor confirmed

  • Pantheon reports degraded: "Security Advisory: Unauthorized Access to Customer Accounts via a Look-alike Sign-in Page".[E1, E2]
  • The vendor marked it resolved at 2026-09-15 19:51 UTC.[E3, E7]

Affected products and regions

  • Components: Customer Sites, Dashboard, Global CDN, Spinup Operations, Workflow Operations, Support Tickets, Terminus Operations, Site Certificate Provisioning, Billing Operations, Autopilot, Git, Front-End Sites (Beta), Content Publisher (Public Preview).[E6]

What is unknown

  • Which regions are affected: the vendor did not say.[E5]
  • Whether your own systems are affected: a vendor report cannot tell you; check your monitoring.

Last update in these facts: 2026-09-15 19:51 UTC · summary s1, evidence 2d10e9d1cc8c715b

Evidence (7)
  1. E1Pantheon reports degraded. (vendor) source (opens in a new tab)
  2. E2Vendor title: "Security Advisory: Unauthorized Access to Customer Accounts via a Look-alike Sign-in Page". (vendor) source (opens in a new tab)
  3. E3Vendor status word: "resolved". (vendor) source (opens in a new tab)
  4. E4Vendor-reported start: 2026-09-12 16:58 UTC. (vendor) source (opens in a new tab)
  5. E5The vendor did not state which regions are affected. (Statuswall)
  6. E6Components the vendor attached: Customer Sites, Dashboard, Global CDN, Spinup Operations, Workflow Operations, Support Tickets, Terminus Operations, Site Certificate Provisioning, Billing Operations, Autopilot, Git, Front-End Sites (Beta), Content Publisher (Public Preview). (vendor) source (opens in a new tab)
  7. E7Vendor-reported resolution: 2026-09-15 19:51 UTC. (vendor) source (opens in a new tab)

Affected scope

Not stated by the vendor

Components: Customer Sites, Dashboard, Global CDN, Spinup Operations, Workflow Operations, Support Tickets, Terminus Operations, Site Certificate Provisioning, Billing Operations, Autopilot, Git, Front-End Sites (Beta), Content Publisher (Public Preview)

No region Statuswall recognises is stated for this incident (place names and provider-specific codes are not converted). It is not assumed to be global.

Potential relevance

Pantheon is not in your stack. Follow it to see whether reports like this fall inside the regions you use.

Timeline

Vendor times come from the vendor. “Seen by Statuswall” times are when Statuswall noticed a change, which can lag the vendor by a few minutes. Statuswall does not store the vendor's update text; read it on the official page.

  1. Sep 12, 2026, 16:58 UTCVendor-reported startVendor time
  2. Sep 15, 2026, 19:51 UTCVendor-reported resolutionVendor time

No changes observed yet. Statuswall began recording changes on incidents in November 2026.