Offline

While some organizations were forced to remain offline for longer periods or had to wait for action from their supplier, we were able to take rapid measures to safeguard the security of our customers and their data. From the very first moment, security was our top priority.

How we responded

When the news broke that two critical PHP vulnerabilities had been discovered, we immediately activated our internal procedures. The objective was clear: minimize risks and protect our customers as quickly as possible.

Our timeline

Morning

• The first reports about the vulnerabilities appear.
• We immediately identify which systems could potentially be affected.
• All colleagues are informed and provided with additional information.
• We inform our customers on our website about the PHP exploit.

Shortly afterwards

• Initially, we choose to take systems offline only when there is a direct reason to do so.
• As more information becomes available and the seriousness of the situation becomes clearer, we decide to put security first.
• By then, thousands of websites and applications worldwide had already been taken offline preventively or had their availability temporarily restricted. In such a situation, a brief interruption of a website is often less impactful than the risk of unauthorized access to systems or data.

Afternoon

• All relevant servers are shut down as a preventive measure.
• Due to the speed at which the situation developed, it was unfortunately not possible to personally inform everyone in advance.

Later that day

• The official security update is released by the PHP Security Team.
• Our administrators immediately install the updates on the affected systems.

Within a few hours

• All systems are checked, updated and available again.
• Websites and applications are functioning normally once more.

Why speed makes the difference

Security incidents are never pleasant, but they do demonstrate the importance of preparation, availability and technical expertise. When a critical vulnerability becomes public, every hour can matter. Thanks to our monitoring, clear procedures and immediately available specialists, we were able to act quickly and limit risks.

For our customers, this resulted in one important outcome: security first, minimal downtime and getting back to business as quickly as possible.

At Infracom, we believe that ICT management is not only about technology, but above all about being ready when it matters most. That is exactly what we did last week.

Stay informed about outages and maintenance

Would you like to be the first to be informed about outages, maintenance activities or important security updates? Then subscribe to our status notifications via: infracom.nl/status

This way, you will always stay informed about the current status of our services and immediately know when maintenance work or disruptions occur.