Ongoing outage
SparkLayer is offline while we fix a global PHP security issue
SparkLayer is offline. A critical security issue in PHP affects a large part of the internet, and we’ve kept our services offline until a fix is in place and verified. We’ve found no evidence that SparkLayer or your data has been affected. We expect to be back online before 12pm UK time.
Updates
-
Update
Our engineering team has made good progress overnight. We’re migrating SparkLayer to updated infrastructure with the security fix in place, and we expect to be back online before 12pm UK time. If we’re back sooner, we’ll post here straight away.
We’re testing everything, including checkout, quick order and pricing, before we switch services back on, so you can rely on SparkLayer as soon as it’s live.
Your data
We’ve found no evidence that SparkLayer or your data has been affected at any point.In the meantime
You can still take orders through Shopify. In your Shopify admin, go to Orders → Create order, add the products and apply your B2B prices, then use Send invoice. Our support team is available at support@sparklayer.io to help.Thank you for your patience. We know this has been a long wait.
-
Identified
SparkLayer is still offline. Our hosting provider’s automatic security update still hasn’t been applied to our platform, so we’ve stopped waiting for it. Our engineering team is now moving SparkLayer onto infrastructure where we install the patched version of PHP ourselves and verify it before anything goes live. We won’t bring services back until that check is complete.
Why we’re still offline
This vulnerability affects a large part of the internet. National cyber security agencies, including the UK’s NCSC, have advised any organisation that can’t fully patch to keep its systems offline, and many organisations have done the same. We’ve found no evidence that SparkLayer or your data has been affected, and we’re not willing to put that at risk.Next update
By 12pm UK time, or sooner if we’re back online.We know this has been a long and frustrating outage, especially for customers in Australia and New Zealand, where it’s covered a full trading day. We’re sorry. Once we’re back online, we’ll be in touch about how we make this right.
-
Identified
SparkLayer is still offline while we complete the security fix. We won’t bring services back until our own engineering team has verified the fix is fully in place and tested. We know that means a longer wait, but we want to be absolutely sure the patch is in place.
Next update: by 7am UK time, or sooner if we’re back online before then.
We post an update whenever anything changes, and at least every few hours until it’s fixed. Questions? Contact support.
