On 20 October 2026 the PHP project announced a critical security update, due on 21 October. PHP is software that runs a large share of websites and online services worldwide. Many organizations are taking precautions while they wait for the fix and install it.
KUARIO has taken its public website offline as a precaution. At the same time, SURFconext, which handles institution login for us, has taken its servers offline. As a result, you cannot sign in with an institution account at the moment.
Payment terminals, card and app payments, and all transactions are not affected and keep running normally. Only signing in with an institution account is unavailable.
We are monitoring the situation and will post an update as soon as institution login works again. SURF publishes its own updates on SURFconext through its status channels.
Posted Oct 21, 2026 - 13:11 CEST
This incident affected: Services (Business Portal, KUARIO Apps).