Cybersecurity Incident Hits Third-Party Provider Hosting Sattva Sukun Lifecare Ltd

Cybersecurity Incident Hits Third-Party Provider Hosting Sattva Sukun Lifecare Ltd​

Sattva Sukun Lifecare Ltd announced a cybersecurity incident that affected a third-party service provider responsible for hosting and managing the Company's official email systems and website. The breach has resulted in disruptions to the Company's email communication services and the temporary unavailability of its website.

The incident stemmed from a critical zero-day vulnerability, identified as CVE-2026-41940. This vulnerability affected servers running the latest versions of cPanel/WHM, and was initially disclosed by cPanel. Although the service provider implemented recommended security updates and mitigation measures, the hosting infrastructure was nevertheless subjected to a sophisticated cyberattack.

The investigation indicated that the attacker gained unauthorized access, causing severe damage to user data and services. The service provider determined that the compromised server environment was no longer secure or trustworthy.

Damage and Recovery Efforts​

According to reports, the attacker allegedly deleted both the database server data and historical backup data from the compromised environment, thereby restricting restoration from backup sources.

As a result of the data loss, the service provider migrated all remaining recoverable data to a new server environment. However, due to the nature and extent of the attack, the Company noted that certain data may only be partially recoverable or may not be recoverable at all.

Sattva Sukun Lifecare Ltd clarified that the incident occurred at the level of the external service provider and was not within the Company's internal IT infrastructure.

Operational Impact and Next Steps​

As a precautionary measure, the Company temporarily taken its website offline and advised stakeholders that email communications may be disrupted or unreliable.

The Company confirmed that it is in continuous coordination with the service provider to assess the full nature and extent of the incident. At this stage, the impact on the Company's data and operations is under evaluation.

The service provider is actively undertaking restoration and remediation measures. Sattva Sukun Lifecare Ltd is also reviewing additional safeguards to mitigate similar risks going forward. The Company intends to keep stakeholders informed of any further material developments regarding the cybersecurity event.

Stock Price Movement​

Sattva Sukun Lifecare Ltd shares settled at ₹0.75 on Thursday, marking a decline of 1.32%. Throughout the trading session, the shares were observed trading within a contained range of ₹0.75 to ₹0.77.