DDoS attack causes major outage at Mastodon.social

On 20 April 2026, a distributed denial-of-service attack targeted Mastodon.social, Mastodon's flagship public server, causing a major outage. Mastodon reported that the attack began around 13:00 and deployed mitigations by approximately 16:00, restoring accessibility within about three hours. The attack itself subsequently ceased and normal operations were confirmed. No verified threat actor attribution was reported.