Spreedly incident
Multiple merchants using Payflow Pro with experiencing intermittent payment failures
Spreedly experienced a major incident on February 4, 2026 affecting Core Transactional API, lasting 1h 41m. The incident has been resolved; the full update timeline is below.
Affected components
Update timeline
- investigating Feb 04, 2026, 06:15 PM UTC
Spreedly has detected an issue that is affecting multiple customers using Payflow Pro where some transactions fail with the error: “Invalid Request. Malicious string found in XML document”. While we are providing an early notification in an effort to alert you as quickly as possible, we are still investigating the actual scope and impact and will provide an update as soon as more details are available. Thank you for your patience.
- monitoring Feb 04, 2026, 07:52 PM UTC
We are no longer seeing errors at this time, and the issue appears to have subsided. We are working with Payflow Pro to identify the root cause. Our team continues to monitor the situation closely to ensure stability. Please continue to follow our StatusPage for the latest updates.
- resolved Feb 04, 2026, 07:56 PM UTC
This incident has been resolved.