Runbox

Runbox is an email service provider that offers privacy‑focused electronic mail solutions to individuals and organizations seeking confidential communication. It enables users to send, receive, and store messages through standard protocols such as IMAP and SMTP, complemented by a webmail interface. The service emphasizes strong encryption and minimal data retention, aiming to protect user correspondence from unauthorized access. Headquartered in Norway, Runbox markets itself to customers who prioritize data protection and wish to avoid surveillance‑oriented business models.

While the prompt does not disclose specific user counts or revenue figures, Runbox’s visibility is evident from its inclusion in coordinated extortion campaigns that targeted multiple privacy‑focused email providers. The 2021 DDoS attack peaked at 256 Gbps, indicating that the attacker perceived Runbox’s infrastructure as substantial enough to warrant a high‑volume assault. In the 2015 incident, the initial disruption lasted roughly fifteen minutes before mitigation measures restored normal email connectivity and website access. These events show that Runbox operates a continuously available service that maintains monitoring and response capabilities to counter network‑level threats.

A distinguishing attribute of Runbox is its explicit commitment to privacy, which sets it apart from mainstream email providers that may rely on advertising or data mining. Being based in Norway subjects the company to European data‑protection frameworks, reinforcing its obligation to safeguard personal information. During both DDoS extortion episodes, Runbox collaborated with Norwegian law enforcement and cybersecurity authorities to investigate and mitigate the attacks. The organization publicly refused to pay the ransom demands, stating that payment would encourage further criminal activity. Throughout the disruptions, Runbox communicated service status updates through its official channels, maintaining transparency with its user base.

The prompt does not provide explicit details about Runbox’s ownership structure, parent companies, or subsidiaries, so no ownership information can be stated. What is known is that Runbox functions as an independent entity headquartered in Norway, with a public blog used to share incident reports and service notices. Thus, the available facts describe Runbox as a privacy‑oriented email provider operating from Norway, experienced in handling DDoS extortion attempts through technical mitigation and law‑enforcement cooperation.