Ficha: ransomware attack on its servers

Some files on Feature's servers were encrypted on 9 February. Its final report on 13 May said 32 servers and other machines were accessed, 13 of them infected with ransomware. The attackers gathered files on one server and sent them to a OneDrive account they controlled, and copied 144 repositories from its GitHub server. The earliest identified intrusion trace was July 9, 2025, but encrypted or deleted logs prevented determination of the initial technique and the full set of stolen files. Normal business had resumed by May 13.