Notepad++ security incident history
Hacking, data breaches and other security incidents involving Notepad++, with related coverage.
Incidents: 2 · Most recent
Notepad++ hosting breach enables update supply chain attack
Impact: Update supply chain exposed to attack for six months
Notepad++'s hosting infrastructure was compromised and its update channel was abused to distribute malware. It was reportedly exposed to the supply chain attack for six months. The attack was attributed to China-linked state-sponsored hackers.
Related reports: 6 · last report →Notepad++ software updates hijacked for months
Notepad++ said on 2 February 2026 that Chinese government hackers had hijacked its software updates for months. The specific scale of damage and response measures have not been confirmed.
Related reports: 2 →