Important security update for our customers

Security Update: All Customer Environments Fully Patched and Back Online

On 21 October, a critical security vulnerability was identified in PHP, a widely used open-source technology that powers many web platforms worldwide.

As a precautionary measure, we proactively took our platform offline to protect our customers and their data. This decision was consistent with guidance from cybersecurity authorities worldwide recommending that affected systems remain offline until a security patch became available and could be successfully applied.

As soon as the security patch became available, our team immediately deployed it across all regions and verified its effectiveness. As of October 22, 02:00 am (CEST), all customer environments have been fully patched and are back online.

Security assessment

Our investigation has found no indication of unauthorised access, data breaches or data leakage. We have no evidence that customer data has been compromised and continue to monitor our systems closely.

Some integrations or connections may need to be re-established. We will contact affected customers directly if any action is required.

We continue to patch our environments regularly as new updates are released. In exceptional cases, applying an update can mean your environment is unavailable for a few seconds, although this should not happen.

We remain in direct contact with our customers. For any questions or assistance, please contact your Customer Success Manager or Diligent Support at 3rdrisksupport@diligent.com.

We apologise for the disruption and appreciate your patience and understanding.

Last updated: 15:24 CET / 09:24 CDT (US Central), 26 October 2026.