why Nextcloud.com is offline?
Many users says that before cloudbox are displayed. See more in this Thread: https://www.reddit.com/r/NextCloud/comments/1v0wxw7/nextcloudcom_cloudbox/
So what happen? Hacked or a planned update/maintenance?
No clue what happened, but just found out it’s down. Let’s hope not hacked and back soon.
I find the lack of communication disturbing. No posts here, no posts on Mastodon, Bluesky, LinkedIn, Youtube, Twitter.
The incident is at least ongoing for 12 hours. People need an information, at least with regard to IT security concerns.
Yeah. We would appreciate it if we could find out if this is just the website being down or a security concern related to the recent breach with Nextcloud: https://cybernews.com/security/nextcloud-cloud-provider-data-leak/
Still no official explanation anywhere. Also see Nextcloud 📱☁️💻 (@nextcloud@mastodon.xyz) - Mastodon.
Also confusing: https://status.nextcloud.com lists the website and the App Store (https://apps.nextcloud.com) as offline. However the App Store seems to be still online. So what happens here?
Not telling anyone what is going on will damage the reputation of Nextcloud, considering the recent data leak: https://cybernews.com/security/nextcloud-cloud-provider-data-leak/
Yes, mistakes can happen - but the way, how you deal with a mistake is also building trust, when done properly or the opposite, if you don’t show the people, that you are able to handle it in an appropriate manner.
I know it’s easy to assume the worst these days, but are there any reasons to believe this was caused by malice or incompetence? It was weekend and it shows “under maintenance” page. Perhaps it was just taken down for… maintenance, over the weekend? I mean, trying to be optimistic here 
True. But if it was planned or even unplanned maintenance, you usually inform people before taking stuff down. At least this would have been an option.
Agreed but when did the “under maintenance” websites come up? That in itself would be enough to be considered a notice unless the website was down, blacked out with no landing page, for many hours and the “under maintenance” just appeared recently which then, yeah looks a bit suspicious and worrisome. But then it could be simply a case of “oops, I forgot to set the redirect” thing and not necessarily a malicious attack.
OK, I used up my daily quota of optimism here Let’s hope we’ll see some actual explanation soon.
The maintenance entry is from short before 10am local time. I guess it is to do work after the incident. I don’t really blame them too much. I have some optimism left for them. They sure are doing what is necessary. It is not easy to find the correct communication in case of incidents these days. Looking forward to the explanation too.
Company will publish something soon.
Hey all,
thanks so much for your questions and interest about the issue with our website.
Sunday afternoon, we had a basic infrastructure issue that took our website down. We are currently restoring it from a backup. Only nextcloud.com is affected, there is no impact on updates or downloads. There is nothing related to Nextcloud operations on that server, so it has no impact on users or customers.
We will let you know once the website is recovered.
Have a good day!
Anna from Nextcloud Developer Relations
Well, “infrastructure issue” is a broad term 
To me, it certainly looks more like someone had “taken over” parts of their infrastructure, maybe gotten access to the server on which the website is hosted and/or the CMS, or perhaps their DNS. But that’s all just speculation.
Yes, thus I would appreciate transparent information. The lack of it makes suspicious, as if Nextcloud has reason to hide something.
Hi everyone, I have some more info on the downed nextcloud.com website:
On Sunday evening our website was defaced. We isolated the affected server immediately and we are still investigating what exactly happened.
Meanwhile our homepage has been restored from a backup on a new server.
We confirm that this breach could not affect any user or customer server, as our other services, like downloads or the Nextcloud App Store are on separate servers and unaffected.
We are continuing with our post-mortem analysis and will give further updates once we have more details.
Thanks for the - more believable - answer, @Anna.
Could you maybe elaborate on the following question: You state that you “are still investigating what exactly happened.” At the same time you “confirm that this breach could not affect any user or customer server, as our other services, like downloads or the Nextcloud App Store are on separate servers and unaffected.”
How can you be sure about the second, when the exact facts are still unclear? I understand that the services live on different servers, but are they also on different networks? Given the assumption (that many people share), that wp2shell was used to deface your website. wp2shell allows for remote code execution. What would stop the attackers from using this remote shell to further investigate and infiltrate your network, including the app and download servers?