As soon as the first reports emerged, we applied additional security measures and worked closely with our WAF provider to inspect potentially suspicious traffic. The measures recommended in PHP’s advisory were implemented within minutes of its publication. Because protection was in place throughout, we did not need to take the platform offline, and there was no service interruption.

Our investigation so far has found no indicators of compromise. We continue to monitor our systems closely.

No action is required from customers. Questions can be sent to security@phished.io.