Lightspeed incident

Statement on PHP vulnerabilities

Resolved after 1 day 21 hours, affecting Retail POS and Lightspeed eCom (Europe) and 1 more, on October 21, 2026.

resolved Oct 23, 2026, 01:32 PM UTC

Lightspeed has completed the deployment of security updates across all products in response to the recently reported PHP vulnerabilities. All services should be available at this time.

Started
Oct 21, 2026, 04:15 PM UTC
Resolved
Oct 23, 2026, 01:32 PM UTC
Duration
1d 21h
Detected by Pingoru
Oct 21, 2026, 04:15 PM UTC

Affected components

Retail POSLightspeed eCom (Europe)Lightspeed eCom (North America & Australia)Retail APIBack OfficeRetail POS

Update timeline

  1. identified Oct 21, 2026, 04:15 PM UTC

    Lightspeed is aware of the PHP vulnerabilities and is actively addressing it. Our teams have put additional safeguards in place. Some services may be unavailable during this time. We’ll continue to monitor the situation closely and provide further updates as appropriate.

  2. resolved Oct 23, 2026, 01:32 PM UTC

    Lightspeed has completed the deployment of security updates across all products in response to the recently reported PHP vulnerabilities. All services should be available at this time.

Your product runs on more than Lightspeed

Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.

Add your stack →