bunny.net said it removed one CDN node in Armenia after a supplier reported unauthorized access involving third-party server-management software. It stopped routing traffic within 20 minutes of notification, preserved logs and wiped the server. Investigators found no evidence that the node was accessed, but could not rule out exposure of cached content, configuration or TLS certificates. Platform-domain certificates were replaced, while managed custom-domain certificates were being reissued with new keys, with completion expected by the end of October 31. Managed-certificate customers need take no action; customers managing their own certificates were advised to revoke and reissue them with new private keys. Completion had not yet been confirmed.