Bye bye plusnet

[Mark]

When we learned of the attack on our Webmail service, we identified the source of the vulnerability and implemented a fix as quickly as possible. However, following a full audit of our Webmail service we identified a number of additional security vulnerabilities that it has not been possible to patch. While these potential vulnerabilities have not been exploited, we are not prepared to compromise on customer security so we have removed our Webmail service.

So, PN have ripped out their entire webmail solution (@mail). I'm not sure if that means it was the software that was vulnerable or their implementation of it.

Either way that shows just how serious it was.

FYI - they're implementing squirrelmail at the moment as a temporary solution. That's certainly a major step back from @mail, but it's simple, effective, and well trusted in the industry.