We have completed our overnight emergency response and successfully deployed security patches across all affected systems where a validated update procedure was available.
For environments where immediate patching is not possible, appropriate precautionary measures have been taken and affected customers have been contacted directly.
We are moving this incident to Monitoring. Our overnight emergency activities have concluded, and we will continue monitoring and following up on outstanding updates later today.
Posted Oct 22, 2026 - 04:49 CEST
Update
PHP security update – patching in progress
Our technical teams are continuing to roll out security updates to as many affected systems as possible. We are prioritising this work while carefully checking compatibility and service availability. Some environments require additional assessment or preparation before updates can be applied. Where further action or service interruption is required, we will inform the affected customers. We will continue to share progress on this status page.
Posted Oct 22, 2026 - 02:14 CEST
Update
We are pleased to report that TrueCare is now back online.
Our teams continue to work around the clock to patch environments and restore services. We understand the impact this has on our customers and appreciate your patience and understanding while we continue these efforts. Further updates will be shared on this page as they become available.
We are continuing to work on a fix for this issue.
Posted Oct 21, 2026 - 18:57 CEST
Identified
UPDATE 18.54
We are actively working to patch and restore affected environments following the recently disclosed PHP vulnerability. Our teams have been working around the clock since the issue was identified.
The first websites and applications have already been successfully restored, and we continue to patch and verify remaining environments as quickly as possible. Our priority is to restore services safely and ensure systems are running on the latest patched PHP versions.
We understand the impact this may have on your business and appreciate your patience while we complete this work. We will continue to share updates via this page as more environments are restored.
A security update addressing the PHP vulnerability is now available. Our security and technical teams are preparing a rollout plan to apply this update as quickly as possible, with appropriate testing and validation.
We will share further information about the rollout and any expected impact as soon as it is available. Updates will be published on this status page, and affected customers will receive additional information by email.
We have informed all our customers about the PHP security vulnerabilities and asked them to reply to our email to confirm whether we may temporarily shut down their servers as a precautionary measure. If you haven't responded yet, we urgently ask you to reply to our email as soon as possible, so we can take the necessary steps to protect your environment. Thank you for your prompt attention and cooperation.
Posted Oct 21, 2026 - 14:35 CEST
Investigating
We are aware of a recently identified security vulnerability affecting PHP.
At this stage, the full scope and potential impact of this vulnerability are not yet clear.
Our Security and Technical teams are actively investigating the situation, assessing potential risks to our infrastructure and services, and determining the appropriate next steps.
We are closely monitoring developments and will take necessary measures based on the findings of our investigation.
We will provide further updates through this status page as more information becomes available.
Thank you for your patience and understanding.
Posted Oct 21, 2026 - 10:39 CEST
This incident affects: Websites (Customer Portal | TrueCare) and Managed Azure, Managed Kubernetes, Highlander VDS.