Temporary unavailability of some Access services

Update timeline

1. identified Oct 21, 2026, 07:41 PM UTC

   Earlier today, two critical vulnerabilities affecting PHP, a widely used web technology, were publicly disclosed (known as PHP2Shell; CVE-2026-109618 and CVE-2026-109619). In line with guidance from the UK National Cyber Security Centre and other national cyber agencies, we have taken the proactive step to temporarily take some services offline as a precaution while we apply the security updates and verify our systems. We are working to restore services as quickly and safely as possible, and we will provide a further update in the next 2 hours. To confirm We have no evidence that customer data has been affected. We continue to investigate and will update you if this changes. If you have any questions, please contact your support team who will be happy to help. We apologise for any inconvenience The Access Group

2. investigating Oct 21, 2026, 09:14 PM UTC

   Dear customer, To confirm our teams continue to work on applying the security patch provided. We will fully test it before applying it to our live environment, so that services are restored safely. At present, it is difficult to estimate a restoration time. We will provide a further update within the next two hours. To confirm, we have no evidence that customer data has been affected. We continue to investigate and will update you if this changes. If you have any questions, please contact your support team, who will be happy to help. We apologise for any inconvenience this is causing and thank you for your patience. The Access Group

3. identified Oct 21, 2026, 09:53 PM UTC

   Dear customer, To confirm our teams continue to work on applying the security patch provided. We will fully test it before applying it to our live environment, so that services are restored safely. Our public facing Wi-Fi login service is up and running again, work is continuing on restoring the rest of our service. At present, it is difficult to estimate a restoration time. We will provide a further update within the next two hours. To confirm, we have no evidence that customer data has been affected. We continue to investigate and will update you if this changes. If you have any questions, please contact your support team, who will be happy to help. We apologise for any inconvenience this is causing and thank you for your patience. The Access Group

4. monitoring Oct 21, 2026, 10:21 PM UTC

   Dear customer, We are pleased to confirm that all services have now been fully restored. Our teams have applied the security patch to our live environment after full testing, and our public-facing Wi-Fi login service and all other services are now operating normally. To confirm, we have no evidence that customer data has been affected. We will continue to monitor our systems closely and will contact you if this changes. If you experience any issues or have any questions, please contact your support team, who will be happy to help. We apologise for the disruption this has caused and thank you for your patience while we resolved it. The Access Group

5. resolved Oct 21, 2026, 10:26 PM UTC

   Dear Customer, As we shared previously, two critical PHP vulnerabilities, known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619), were publicly disclosed. As a precaution, and in line with guidance from the UK National Cyber Security Centre and other national cyber agencies, we temporarily took Wireless Social offline while we applied the security update and verified our systems. We are pleased to confirm the security update has now been applied and tested, and services have been fully restored to the live environment. To confirm, we have no evidence that customer data has been affected. We will continue to monitor the situation and will update you if this changes. Thank you for your patience while we worked to keep your data and our services secure. We apologise for the disruption this caused. The Access Group