As many of you may now be aware, on January 4, at approximately 11:15 PM PST the VM that runs the PASS Database, which is hosted in Azure Cloud, unexpectedly went down. The database was down until 11:45 PM. A default DNN installation error message screen revealed a single username of a PASS member. There was no security breach and no personal information or passwords were revealed or accessed.

This default DNN installation screen appeared for any user attempting to access all PASS websites. The confusion surrounding the potentially revealed personal information occurred as a result of the default DNN message. This error page has now been revised with more accurate messaging in the event that there is an outage in the future.

Once notified of the website outage, the IT team had to manually reconnect the database and PASS websites, as this had not occurred automatically, which is why website access was unavailable for a longer period of time than the half-hour Azure downtime window. As part of the existing PASS IT disaster recovery plan, two new mechanisms will be put in place: a more proactive monitoring system that will allow real-time database and application monitoring, ensuring we are instantly aware of website failures; and redundancy protection by provisioning PASS websites over multiple Azure data centers.

On behalf of the entire PASS Board, I want to stress that we take protecting your personal information very seriously and implement every reasonable measure to ensure it is kept safe.

Tim Ford
PASS Membership