Ongoing since 06:03 PM UTC, affecting OpenLearn and OpenLearn (OpenLearn — OpenCreate) and 1 more.
Learning systems have been restored after our preventative action to take them offline following warnings from the National Cyber Security Centre (NCSC) about a worldwide critical security issue (https://www.ncsc.gov.uk/news/critical-security-issue-affecting-php) issued to UK organisations such as ourselves. Our staff are working hard to restore systems and the following are now operational: 1. Module websites, which also includes access to online tutorials. 2. OpenLearn and OpenLearn Create. Our staff are continuing to work throughout the night to restore systems and we will provide another update by 08:00 tomorrow (Thursday 22 October 2026). We apologise for any inconvenience caused but we must act decisively in these situations to protect students, staff and OU systems.
Affected components
Update timeline
- identified Oct 21, 2026, 06:03 PM UTC
Earlier today, the National Cyber Security Centre (NCSC) issued advice to UK organisations warning of a worldwide critical security issue (https://www.ncsc.gov.uk/news/critical-security-issue-affecting-php). Upon receiving the alert, The Open University (the OU) has taken the preventative measure to take several of our learning systems offline to safeguard students and staff from this identified threat. Learning systems include all module websites, online tutorials, the HelpCentre, OpenLearn and OpenlearnCreate. Unfortunately, this means staff and students are not currently able to access our learning systems and any tutorials that were due to take place this evening (Wednesday 21 October 2026) will be rescheduled. We apologise for the inconvenience this has caused but we must act decisively in these situations to protect students and staff and OU systems. Like other organisations, we must wait for third-party security fixes to be put in place before we can restore our learning systems. Staff will be working throughout the night to try and restore our learning systems and we will update further at 8am (Thursday 22 October 2026).
- monitoring Oct 21, 2026, 07:38 PM UTC
Learning systems have been restored after our preventative action to take them offline following warnings from the National Cyber Security Centre (NCSC) about a worldwide critical security issue (https://www.ncsc.gov.uk/news/critical-security-issue-affecting-php) issued to UK organisations such as ourselves. Our staff are working hard to restore systems and the following are now operational: 1. Module websites, which also includes access to online tutorials. 2. OpenLearn and OpenLearn Create. Our staff are continuing to work throughout the night to restore systems and we will provide another update by 08:00 tomorrow (Thursday 22 October 2026). We apologise for any inconvenience caused but we must act decisively in these situations to protect students, staff and OU systems.
Your product runs on more than Open University
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services