Lightspeed incident

Statement on PHP vulnerabilities

Ongoing since 04:15 PM UTC, affecting Retail POS and Lightspeed eCom (Europe) and 1 more.

identified Oct 21, 2026, 04:15 PM UTC

Lightspeed is aware of the PHP vulnerabilities and is actively addressing it. Our teams have put additional safeguards in place. Some services may be unavailable during this time. We’ll continue to monitor the situation closely and provide further updates as appropriate.

Started
Oct 21, 2026, 04:15 PM UTC
Resolved
Ongoing
Duration
● 23h 6m
Detected by Pingoru
Oct 21, 2026, 04:15 PM UTC

Affected components

Retail POSLightspeed eCom (Europe)Lightspeed eCom (North America & Australia)Retail APIBack OfficeRetail POS

Update timeline

  1. identified Oct 21, 2026, 04:15 PM UTC

    Lightspeed is aware of the PHP vulnerabilities and is actively addressing it. Our teams have put additional safeguards in place. Some services may be unavailable during this time. We’ll continue to monitor the situation closely and provide further updates as appropriate.

Your product runs on more than Lightspeed

Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.

Add your stack →