Acronis Update Regarding OpenSSL Heartbleed Vulnerability

Acronis® focuses on New Generation Data Protection solutions and strives to ensure every customer has the utmost level of security for their data. In response to the recent discovery of a vulnerability in OpenSSL software described as CVE-2014-0160 (also known as the Heartbleed bug), we have reviewed our software and services for vulnerabilities and made the necessary updates to ensure comprehensive protection of our customers' data. We are happy to inform you that our key products are unaffected by the vulnerability and a select few can be updated to ensure continued protection.

Unaffected products, not requiring any action by customer:

• Acronis Backup (all versions)
• Acronis Backup Advanced (all versions)
• Acronis True Image™ (all versions)
• Acronis Snap Deploy® (all versions)
• Acronis Disk Director® (all versions)

Affected products that may require action by customer:

• Acronis Website: User account management
  • We have updated OpenSSL, regenerated key pairs and reissued server SSL certificate. Customers are recommended to change their passwords.
• Acronis Cloud: Online backup storage front-end servers
  • We have updated OpenSSL, regenerated key pairs and reissued server certificate. Customers are not required to perform any action.
• Acronis Access 6.0 and 6.0.1
  • Require update to Acronis Access 6.0.2
• Acronis activeEcho 2.0 - 5.1.3
  • Require update to Acronis Access 6.0.2
• Acronis mobileEcho 2.0 - 5.1.3.
  • Require update to Acronis Access 6.0.2

Acronis®, Acronis True Image™, Acronis Snap Deploy®, and Acronis Disk Director® are registered trademarks of Acronis International GmbH in the United States and/or other countries.