Resolved -
Dear customer,
Earlier today, we informed you that we were taking Optimy offline as a precaution following the disclosure of critical security vulnerabilities in PHP, a technology used by a large part of the internet.
We are pleased to confirm that the operation has been completed successfully and that all core Optimy services are available again. A limited number of custom developments built for specific customers will be restored gradually tomorrow, 22 October.
What we did
As soon as the official security fixes were published by the PHP project, our teams installed and verified them across our infrastructure, in all our hosting regions (Europe, Switzerland, Canada and the United States). Services were then brought back one by one, after verification.
Your data
We have no indication that any customer data has been accessed. Taking the platform offline before the fixes were released allowed us to remove the risk of exploitation during the most critical window.
If you notice anything unusual when using the platform, please contact our support team. For any other questions, your Account Manager remains at your disposal.
Thank you for your patience and understanding today. We know an interruption is never convenient, and we appreciate your trust.
Oct 21, 20:46 CEST
Identified -
Dear customer,
Here is an update to our last statement and situation :
What we are doing
Our security and engineering teams have been working on this since the first reports emerged this morning. To remove any risk to your data, we will take all Optimy platforms offline today at 15:45 CEST (13:45 UTC), shortly before the official security update from PHP is released at 16:00 CEST. Volunteer Platform has already been offline since early this afternoon for the same reason.
Once the update is released, we will install it, verify it, and bring services back one by one, in this order: Submission Platforms, Admin Platforms, APIs, Evaluation, and Volunteer Platform.
Expected impact
In the best case, we expect most services to be available again within one to two hours. Some services may only come back later. While the platform is offline, your users will see a maintenance page explaining the situation.
Your data
We have no indication that any customer data has been accessed. This is a preventive measure, not a response to an incident: we would rather accept a short interruption than take any risk with your data.
If you have any questions, please contact your Customer Success Manager or our support team.
We apologise for the inconvenience and thank you for your trust and understanding.
Oct 21, 15:33 CEST
Update -
We are continuing to investigate this issue.
Oct 21, 14:39 CEST
Investigating -
Dear customer,
You may have seen reports today about a critical security vulnerability affecting PHP, a technology used by a large part of the web and by many software providers worldwide, including Optimy.
Our security and engineering teams have been actively managing this situation since the first reports emerged. Protecting your data is our highest priority.
Why Volunteer Platform is temporarily offline
The main Optimy platform is currently shielded by an additional protection layer that filters malicious traffic before it reaches our servers. This layer has already been updated by our security partner to block attempts targeting this vulnerability. This is a precaution, not a reaction to an incident: we prefer a short interruption of service over any risk to your data.
Volunteer Platform will be back online as soon as the official security update is applied and verified.
We apologise for the inconvenience and thank you for your understanding. We will notify you as soon as Volunteer Platform is available again.
If you have any questions, please contact your Customer Success Manager or our support team.
If you want to know more please also take a look at PHP official news page here https://www.php.net/index.php#2026-10-20-1
Oct 21, 14:38 CEST