BRIDGEWEB: UPDRAFTPLUS INCIDENT OWNER CHECKLIST Checked 27 October 2026 https://www.bridgeweb.ca/blog/updraftplus-breach-wordpress-checklist-2026 This is a review aid, not a scan or a security certificate. [ ] Identify the products and connections used by the website. [ ] Follow current official update and connection instructions. [ ] Investigate unexpected activity and record the findings. [ ] Preserve useful logs and recovery copies. [ ] Account for recent orders, bookings and inquiries before any restore. [ ] Confirm a completed fresh backup and check the recovery arrangement. [ ] Assign an owner and date to each remaining action. Domain: Review date: Reviewed by: Installed version: Connection findings: Latest backup date/location (no credentials): Restore test or recovery evidence: Remaining actions and responsible person: Official notice: https://teamupdraft.com/blog/security-incident-october-2026/ Never put passwords, private keys or customer records in this checklist.