It is clearly Media Temple at fault, and they either have to prove otherwise quickly, take responsibility and compensate their affected customers, or risk this huge wave of bad press becoming a tsunami that engulfs the good image of the company. I for one will not be recommending them as I have done in the past, and will be evaluating my options.

In the past, we have been very open about exploits to our servers. I would like to point out that this issue does not relate to previous security incidents #1167 and #1026 – which were absolutely reflective of an inadequately secure architecture. We’ve accepted responsibility for those past issues, corrected them and have done so publicly: http://mdtm.pl/b0eN8V and http://mdtm.pl/8FfAl0, respectively.

In total, we believe some of your statements are inaccurate. This current attack on WordPress databases does not represent a provider-level compromise as you insinuate. Your suggestion that (mt) is being dishonest or that the company is circumventing responsibility is inaccurate. We have done large amounts of investigation into the most recent compromises affecting our customers and have determined that these issues are not server level or infrastructure related.

You make a point, “there is no guarantee that the hackers haven’t altered other files in our websites, other than WordPress, and this becomes a very worrisome issue.” We agree, this is a worrisome issue. At this time, we are still investigating the root causes of these most recent compromises. We have a number of possible reasons, but we have excluded our servers from being one of them.

While we are deeply investigating this issue, we always strive to provide the best possible support to our customers. If you find yourself the subject of an attack like this, we will provide you what information we can to help get it resolved. In this particular compromise, we are seeing that these compromises are being injected directly through the database username and password. As always, we insist that all passwords are updated (including database users) whenever something like this occurs. We would also be happy to walk you through the correction process. We aim to give everyone the best experience possible and we certainly understand that this is not always possible. We are proud to have thousands upon thousands of customers worldwide with an experience contrary to yours. If you have the time and willingness, we would like to contact you to make sure that we have been completely straightforward regarding this issue.