Why We Don't Back Down: Sovereign Infrastructure Survived a Real Attack

April 19, 2026 • Updated May 9, 2026 • 5 min read

Last week, our infrastructure was targeted. Someone attempted to smear our reputation by flagging our domain on third-party "spam" lists and publishing our server details on public forums.

They called us a threat. They tried to bury us in noise.

It didn't work.

What Actually Happened

A bad actor scraped publicly available DNS records and posted them alongside a false "spam" report. That's it. No breach. No hack. No data compromised. No downtime.

What they intended as a smear campaign actually served as a live stress test of our infrastructure. And we passed.

Within hours, we executed a surgical infrastructure migration that rendered every piece of "intelligence" they published obsolete. The server they were pointing at became a ghost.

Why This Matters for Therapists

If you are a therapist, counselor, or health practitioner reading this, pay attention. This is not just our story. It is a warning about the industry you are trusting with your client data.

Ask yourself: Could your current hosting provider survive a targeted attack?

Most therapists are on shared hosting — the same server as hundreds of other websites, with no isolation, no encryption at rest, and no sovereign control. If someone targets a shared host, they don't just get one website. They get all of them. See our analysis of mainstream hosting risks.

We built Clear Practise because that status quo is unacceptable for people handling sensitive client data. Sovereign hosting means your data sits on infrastructure that you control, in a jurisdiction that protects it, with encryption that makes it useless to anyone who shouldn't have it.

The lesson: If your hosting provider can be taken down by a forum post, your clients' data is not safe. Sovereign infrastructure is not a luxury. It is a professional obligation.

Why We Were Targeted

We serve therapists, journalists, and privacy advocates — people who operate outside the mainstream data economy. That makes us a target by definition. The same systems that profit from surveillance and data brokerage do not welcome alternatives that respect privacy.

Being flagged as "spam" by an automated system is not evidence of wrongdoing. It is evidence that you are disrupting a system that relies on everyone being trackable.

We wear it as a badge.

The Founding 15: Built on Proven Architecture

We are not pausing. We are accelerating.

The Founding 15 program offers sovereign hosting instances built on the exact architecture that just withstood a targeted attack. Not marketing promises. Proven infrastructure.

What You Get:

  • 50% Off Setup Fees — Early adopter pricing, locked in for life.
  • Free Migration — We move your site from your current host, securely.
  • Direct Founder Support — No ticket queues. No call centres. A human who cares.
  • Sovereign DNS & Encrypted Access — Your site, your rules.
  • Crypto Payment Options — BTC, LTC, XMR. Financial privacy included.

Claim Your Spot (Limited Availability)

Build Your Own Privacy Stack

Sovereign hosting is the foundation. But a truly private practice needs a full stack. We use and recommend Proton for the rest:

🛡️ Get the Full Privacy Stack

Proton Unlimited bundles Mail, Drive, Pass, and VPN in one subscription. The same tools we trust for our own infrastructure.

Get Proton Unlimited (64% Off)

Using this link supports Clear Practise's privacy advocacy work.

Frequently Asked Questions

Can shared hosting survive a targeted attack?
No. Shared hosting places hundreds of sites on one server. If the server is targeted, all sites are at risk. Sovereign hosting with container isolation ensures that even if one instance is probed, others remain unaffected.
What happened during the Clear Practise attack?
A bad actor scraped publicly available DNS records and filed a false spam report. No data was breached, no services were disrupted, and no vulnerabilities were found. Within hours, we executed a surgical infrastructure migration that rendered the published intelligence obsolete.

The Bottom Line

We were attacked. We held. We migrated. We are still here.

If your hosting provider cannot say the same, you have a problem. Not a theoretical one — a real one, verified by real attackers, on a real timeline.

Secure your practice. Own your data. Stand your ground.

Get in Touch