Datto outage, October 2026: Datto AV - Increase in PDF detection as PHISH/PDF
Datto is reporting an incident: Datto AV - Increase in PDF detection as PHISH/PDF. It is still open.
OKWorking normally
From Datto's official status page, in their words.
What happened
- Started
- Status
- monitoring
- Duration
- 5 days so far
- Impact
- none
- Affected
- Datto AV
Why it happened
Datto has not given a cause yet. We never guess one.
Timeline
Newest first. From Datto's official status page, in their words.
- monitoring
Our engineering team has identified the issue and is monitoring the fix. Some PDF files, were incorrectly flagged as PHISH/PDF.Agent. A specific detection rule has been disabled in VDF 8.21.8.130, deployed October 28, 2026. The rest of the PHISH detection category remains active. We are monitoring to confirm new false positives have stopped. Files that have already been quarantined must be restored manually.
- investigating
We are aware of a problem where Datto AV is incorrectly flagging newly created .pdf files as PHISH/PDF, causing the files to be quarantined. The Kaseya R&D Team is currently investigating this issue. In the meantime our Support team has been supplied with a workaround and can assist you with implementing it. If you would like to have the workaround applied, please create a ticket with our Support team or contact them at 833-863-2237. To work around this issue: Adding exclusions for the affected folders and files. Then restoring the affected files. Subscribe to the Kaseya Status Page for up-to-date information at https://status.kaseya.com/
What this means for a business
- Do not turn off two-factor or password tools to get around it.
- Use the recovery codes you printed when you set it up.
- If staff cannot sign in, wait for the vendor rather than resetting everyone's passwords.
The full guide: what to do when a service you rely on is down
Other Datto incidents
- Scheduled Maintenance – Cloud Target Appliance Upgrades, maintenance scheduled
- Scheduled Maintenance – Cloud Target Appliance Upgrades, maintenance scheduled
- Scheduled Maintenance – Cloud Target Appliance Upgrades, maintenance scheduled
- Scheduled Infrastructure Maintenance – US-East Region, maintenance scheduled
- Scheduled Infrastructure Maintenance – US-East Region, maintenance scheduled
Hear about the next Datto incident as it starts
Free email alerts when the official status changes, with what to do while it is down.