Virtuagym is currently experiencing a critical incident affecting Website and Mobile Apps and 1 more component, which began 9h ago. The vendor's full update timeline is below.
Affected components
Update timeline
- investigating Oct 21, 2026, 11:49 AM UTC
Dear customer, As you may have seen in the news, a major security vulnerability has been discovered that affects a large share of websites and online services worldwide, including ours. Your data's safety is our top priority. Like many other companies and organizations, including several Dutch government services, we have temporarily paused our service as a precaution while we apply the necessary security patches. We want to reassure you that the Virtuagym software and services have not been compromised, and neither has your members' data. This pause is purely preventive. What this means for you: While the service is offline, you and your members won't be able to log in, book classes or use the app. We recommend: Letting your members know about the temporary interruption (we've included a short message you can use below) Planning a manual alternative for check-ins and bookings, if needed We know how important our platform is to your business, and getting it back up and running is our highest priority. We will only restart the service once these security patches are in place and we're confident your data is protected. You can follow the latest updates here. We'll also email you again as soon as the service is available.
- investigating Oct 21, 2026, 01:06 PM UTC
We are continuing to investigate this issue.
- identified Oct 21, 2026, 03:32 PM UTC
The global PHP development team has released an official patch for the vulnerability that led us, and many other companies, to take our system offline as a precaution. PHP is the widely used programming language that our platform is primarily built on. The Virtuagym system and your data have not been compromised. Our engineers are now investigating the patch and how to apply it to our platform. We’re still committed to bringing the service back as soon as possible, and we’ll only do so once we’re confident the vulnerability has been fully resolved.
- identified Oct 21, 2026, 05:56 PM UTC
Our team is making good progress on the updates for the PHP vulnerabilities. These are the vulnerabilities that led us, like many other companies, to pause our service as a precaution. We’re now in the first phase of testing, making sure the updates can be applied without significantly affecting the service. Virtuagym and your data have not been compromised. We’ll post another update here as soon as testing is complete.
- identified Oct 21, 2026, 07:53 PM UTC
Testing of the security updates has gone well. Based on where we are now, we expect the full service to be back online between: 22:00 – 22:30 CEST (Amsterdam) 21:00 – 21:30 BST (London) 16:00 – 16:30 EDT (New York) 07:00 – 07:30 AEDT (Sydney/Melbourne), Thursday 22 October 09:00 – 09:30 NZDT (Auckland), Thursday 22 October We’re running a final round of tests now. These will confirm whether we can go ahead and bring the service back.