ChangeTower incident
📢 Important Security Update: Preemptive Monitoring and System Status
ChangeTower is currently experiencing a major incident, which began 5h ago. The vendor's full update timeline is below.
Update timeline
- investigating Oct 21, 2026, 02:39 PM UTC
We want to share an important update regarding a newly discovered global vulnerability in PHP, a core programming language used by millions of websites and platforms across the internet. First and foremost: There has been no data breach at ChangeTower, and your data remains completely safe. Our security team is actively monitoring the situation in real time, and we have already deployed extra protective filters at our network layer. Because official patches from the PHP Foundation are still being finalized today, cyber security authorities worldwide have advised platforms to closely monitor traffic or temporarily isolate systems. Out of an abundance of caution and to ensure the total security of your data, ChangeTower may experience brief, temporary periods of planned downtime today if our monitoring teams determine a proactive shutdown is necessary. • **Is my data safe?** Yes. We have seen zero unauthorized access. This is a preemptive defense strategy, not a reaction to an incident. • **What should I expect?** If we take systems offline as a precaution, users will temporarily be unable to access their dashboards. • **When will this be resolved?** We are prepared to deploy the official permanent security patch the exact moment it is released by the core developers later today, minimizing any disruption to your events. We deeply appreciate your patience and understanding as we take these aggressive, proactive steps to keep your data entirely secure. We will keep this page updated with further developments.