Is TapClicks down?

On October 20, the PHP security team issued advance notice of two critical vulnerabilities in PHP (CVE-2026-109618 and CVE-2026-109619), rated 9.2 out of 10 for severity (Remote Code Execution). Upstream maintainers have scheduled an emergency security release for today, October 21, at 14:00 UTC / 10:00 AM EDT. Given the severity of these vulnerabilities and public discussions surrounding leaked exploit details prior to the official patch release, we made the deliberate decision to take the TapClicks platform temporarily offline until the vendor fix can be applied. This proactive isolation is consistent with guidance from leading cybersecurity advisories, including CERT-EU Advisory 2026-018. What's Affected: The core TapClicks application is currently unavailable. Data processing queues and daily data loads will automatically resume processing sequentially once platform service is restored. Next Steps: We will deploy the security patch as soon as possible upon release by the PHP security team, complete environment integrity checks, and restore full service. We will post our next update by 7:30 AM Eastern, or sooner as new information becomes available. We apologize for the disruption to your workday and appreciate your understanding as we prioritize platform security. For urgent inquiries, please contact our support team at [email protected].

Our teams are working around the clock to prepare for the release of the official PHP security patch and monitor any developments. We will provide more updates as they become available.

Our engineering teams remain on active standby as we prepare for the official upstream PHP security release, scheduled for 10:00 AM Eastern (14:00 UTC) today. Upon release, we anticipate a deployment, verification, and testing window of approximately two hours before bringing core application services back online. To ensure environment stability, platform access and data processing queues will be restored gradually as service checks complete. We appreciate your patience and will provide our next status update around 10:30 AM Eastern, as new information becomes available.

We are continuing to improve the infrastructure to mitigate the global security vulnerability.

Ongoing communication about this issue will be covered under the incident "Worldwide PHP Security Event: How TapClicks Is Protecting You"

Approximately 25% of our data load processes failed this morning due to an infrastructure configuration change. We have resolved the issue and are currently re-running the failed data loads. We are also evaluating the impact on scheduled reports and will resend any affected reports as soon as the data loads complete. We apologize for the inconvenience and appreciate your patience.

The failed data loads have all been restarted and we are monitoring. Once they complete, we will be able to start resending impacted scheduled reports.

Impacted scheduled reports are now being resent for all instances whose data load has completed. We will provide another update in the morning. Thank you for your patience.

The vast majority of impacted scheduled reports have been resent. We are still monitoring and will provide an update later today.

This issue has been resolved - if you have any questions about your scheduled reports, please reach out to [email protected].

We are seeing delays in report availability from The Trade Desk for September 26 and 27, so data for these dates may be incomplete. Affected users may also see longer refresh times or occasional failed fetches for this data source. Our team is working with The Trade Desk and is making improvements to how our integration handles delayed reports. The missing data will be backfilled automatically once it is available, so no action is needed. We will post updates here as the issue progresses.

This incident has been resolved.