Resolved -
Title: File Uploads Temporarily Restricted
Status: Resolved
Posted: 22/10/26 12:59
Our engineering teams have advised that the platform is now fully operational, we're confident that all systems are secure and we're now monitoring all potential exploit paths instead of actively blocking requests to them.
With this in mind, we're resolving the incident related to the Temporary File Uploads Restriction. If you have any further issues, please don't hesitate to contact our Client Support Team on 01392 826980 (Option 1)
Oct 22, 12:03 UTC
Update -
Title: File Uploads Temporarily Restricted
Status: Monitoring
Posted: 22/10/26 09:48
As a precaution following recent PHP security advisories yesterday, we’re keeping a temporary restriction on file uploads in place across the DigiTickets platform while we continue to monitor for suspicious activity.
What this means for you: Ticket sales, checkout, account access, and all most other services are operating normally. Only file upload functionality is affected, which is affecting the following known features:-
-Creating new events and updating event details
-Updating the event statuses (e.g. from inactive to active)
-Re-sending order confirmation emails through the Back Office.
What we’re doing: Our team is actively monitoring our systems and will lift the restriction once we’re confident it’s safe to do so. We have no evidence of any impact to customer data.
What you need to do: No action is required, we will provide updates on the functionality of these features as soon as we can. In the meantime, if you have any other functionality issues, please don't hesitate to contact our Client Support Team on 01392 826980 (Option 1)
Oct 22, 08:48 UTC
Update -
Title: File Uploads Temporarily Restricted
Status: Monitoring
Posted: 21/10/26 19:30
As a precaution following recent PHP security advisories, we’re keeping a temporary restriction on file uploads in place across the DigiTickets platform while we continue to monitor for suspicious activity.
What this means for you: Ticket sales, checkout, account access, and all other services are operating normally. Only file upload functionality is affected.
What we’re doing: Our team is actively monitoring our systems and will lift the restriction once we’re confident it’s safe to do so. We have no evidence of any impact to customer data.
What you need to do: No action is required
Oct 21, 18:32 UTC
Update -
Status update: After reviewing the issue, we're confident that we've blocked the exploit on DigiTickets and Shiftie. We're now rolling out patches for all our platforms, which will take several hours.
Oct 21, 15:16 UTC
Monitoring -
We’re aware of recently published security advisories affecting certain versions of PHP, a widely used programming language that powers parts of the DigiTickets platform.
What this means for you: At this time, we have no evidence that any customer data has been accessed or affected / not identified any impact to customer data. Ticketing, checkout, and account services are operating normally. We have turned off the ability to process file uploads or imports during this time.
What we’re doing: Our engineering team has assessed the advisories and will apply the relevant security updates / rolling out patched versions across our environments as part of our standard security process. It's possible that we may encounter some platform outages while updates are applied. We will provide regular status page updates during this time.
What you need to do: No action is required from you.
Oct 21, 13:38 UTC