Temporary unavailability of some Access services

Update timeline

1. identified Oct 21, 2026, 05:20 PM UTC

   Dear Customer, We want to inform that we are currently experiencing difficulties with Access Collins, Tonic, Soda, DesignMyNight.com. Our team has identified this as a high-priority issue and is actively working to resolve it. At Access, we are dedicated to providing the best possible service and are putting in our utmost effort to address this incident promptly. We will provide our next update in 30 minutes or sooner if a resolution is reached. Please continue to monitor this page for further updates. Thank you for your understanding. Your Access Team

2. identified Oct 21, 2026, 06:51 PM UTC

   Earlier today, two critical vulnerabilities affecting PHP, a widely used web technology, were publicly disclosed (known as PHP2Shell; CVE-2026-109618 and CVE-2026-109619). In line with guidance from the UK National Cyber Security Centre and other national cyber agencies, we have taken the proactive step to temporarily take some services offline as a precaution while we apply the security updates and verify our systems. We are working to restore services as quickly and safely as possible, and we will provide a further update in the next 2 hours. To confirm We have no evidence that customer data has been affected. We continue to investigate and will update you if this changes. If you have any questions, please contact your support team who will be happy to help. We apologise for any inconvenience The Access Group

3. identified Oct 21, 2026, 09:10 PM UTC

   Dear customer, To confirm our teams continue to work on applying the security patch provided. We will fully test it before applying it to our live environment, so that services are restored safely. At present, it is difficult to estimate a restoration time. We will provide a further update within the next hour. To confirm, we have no evidence that customer data has been affected. We continue to investigate and will update you if this changes. If you have any questions, please contact your support team, who will be happy to help. We apologise for any inconvenience this is causing and thank you for your patience. The Access Group

4. identified Oct 21, 2026, 10:21 PM UTC

   Dear Customer, We are writing with a further update on the two critical PHP vulnerabilities, known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Our engineering team continues to work through testing of the security patch before it is applied to our live environment. This testing is essential so that services are restored safely. We will provide a further update within the next hour. To confirm, we have no evidence that customer data has been affected. We continue to investigate and will update you if this changes. We apologise for the inconvenience this is causing and thank you for your patience. The Access Group

5. identified Oct 21, 2026, 11:21 PM UTC

   Dear Customer, Please find below the latest update : Our engineering team continues to test the security patch with some areas still need testing before the update is fully verified. This testing is essential so that the system is restored safely. We will provide a further update within the next hour. To confirm, we have no evidence that customer data has been affected. We continue to investigate and will update you if this changes. We apologise for the inconvenience and thank you for your patience while we work through the security patch update process. The Access Group

6. identified Oct 22, 2026, 12:26 AM UTC

   Dear customer, To confirm the testing on the security patch is progressing well and based on current progress, we estimate the service will be restored within the next 2 hours. We will provide a further update on progress within the hour. To confirm, we have no evidence that customer data has been affected. We continue to investigate and will update you if this changes. We apologise for the inconvenience and thank you for your patience. The Access Group

7. monitoring Oct 22, 2026, 01:07 AM UTC

   Dear customer, We are pleased to advise that we have restored all services that were temporarily taken offline as a precaution in response to the PHP2Shell vulnerabilities. The security update has been applied and services are back online. We will continue to closely monitor the services. Please note, Incoming Colins mail is currently unavailable and is being progressed. Also, Access Soda reporting will be unavailable for the next 2 hours while the database re-indexing completes. Please accept our apologies for the interruption to service. Our priority was to protect our data and yours, and followed the recommended security steps to manage. Kind Regards The Access Group.

8. resolved Oct 22, 2026, 10:37 AM UTC

   Dear Customer We are writing to confirm that we have closed our incident relating to the PHP vulnerabilities (PHP2Shell, CVE-2026-109618 and CVE-2026. Our checks have found that these applications were not affected by the vulnerabilities. We have no evidence that customer data has been affected. We will contact you directly if this changes. If you have any questions, please contact your support team, who will be happy to help. Kind Regards The Access Group.