Confirmation of Payee: elevated error rates
Investigating - We are seeing an increased number of Confirmation of Payee (CoP) requests failing or timing out. A third-party provider in the Confirmation of Payee chain has confirmed an issue on their side and is working on a fix. We are monitoring closely.

Other payment services are not affected.

If a Confirmation of Payee request returns an error or times out, please retry it. We will post another update as soon as we hear more.
Oct 22, 2026 - 15:48 BST

About This Site

Here you’ll find real-time information on the availability and performance of our services. We use this page to keep you informed about any incidents, scheduled maintenance, or system updates — so you’re always in the loop.

✅ All systems operational? Great.

🚧 Issues or updates? We’ll post them here right away, along with regular progress updates until they’re resolved.

Uptime over the past 90 days. View historical uptime.
Payments API Operational
Hub Operational
Integration Methods Operational
Components Operational
Hosted Checkout Operational
Product Pillars Operational
Payouts Operational
Pay by Bank Operational
Direct Debit Operational
Cards Operational
Services Degraded Performance
Confirmation of Payee Degraded Performance
Hosted Payment Page Operational
Card API Operational
Operational
Degraded Performance
Partial Outage
Major Outage
Maintenance
Major outage
Partial outage
No downtime recorded on this day.
No data exists for this day.
had a major outage.
had a partial outage.

No incidents or maintenance related to this downtime.

Oct 28, 2026

No incidents reported today.

Oct 27, 2026

No incidents reported.

Oct 26, 2026

No incidents reported.

Oct 25, 2026

No incidents reported.

Oct 24, 2026

No incidents reported.

Oct 23, 2026

No incidents reported.

Oct 22, 2026

Security maintenance: eMudhra certificate compromise and critical PHP vulnerabilities
Completed - All security fixes are now deployed across the Acquired environment. Both the eMudhra certificate compromise and the critical PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619) are fully resolved on our side, and merchant data and payment processing remain secure.

If you host PHP web applications, such as WordPress, WooCommerce or Magento, please make sure PHP has been upgraded to 8.5.12, 8.4.27, 8.3.36 or 8.2.35. This needs to be done on your side.

If you have any questions, contact Acquired Support.
Oct 22, 15:42 BST
Update - To confirm, there will be no impacts to processing during these updates.
Oct 22, 14:53 BST
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Oct 22, 14:30 BST
Scheduled - We’re carrying out security maintenance in response to two critical vulnerabilities disclosed this week.

eMudhra intermediate certificate compromise:

The private keys for several intermediate certificates issued by eMudhra can be recovered. This lets someone impersonate websites to any software that still trusts those certificates. Major browsers and operating systems have now revoked them. We completed this maintenance across the Acquired environment on the evening of 21 October, and merchant data and payment processing remain secure.

Critical PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619):

These two flaws, each rated CVSS 9.2, can allow unauthenticated remote code execution on servers running PHP. The patch is being tested now and will be deployed by the end of today, 22 October. We’ll update this notice once it’s complete.

Recommended action for merchants

The PHP vulnerabilities are in PHP itself, not in the Acquired WooCommerce plugin. Our plugin is not affected and doesn’t need an update. However, PHP runs on your own servers or hosting, so the upgrade has to be done on your side.

WordPress, WooCommerce, Magento (Adobe Commerce) or anything else that runs on PHP: Ask your developer, agency or hosting provider today to upgrade PHP to 8.5.12, 8.4.27, 8.3.36 or 8.2.35. This applies to all PHP web applications you host, whether or not they integrate with Acquired.

Servers and devices: Keep operating systems, browsers and CA certificate bundles up to date.

More information:

eMudhra: https://emudhra.we-have-a-problem.com/
PHP: https://www.php.net/releases/

If you have any questions, contact Acquired Support.
Oct 22, 14:21 BST

Oct 21, 2026

No incidents reported.

Oct 20, 2026

Partial Service Degradation
Resolved - This incident has now been resolved.
Oct 20, 17:01 BST
Update - We're now seeing recovery across the failed cloud zone, and Google Cloud have marked their incident as resolved.

We will continue to monitor, but there should be no further impact to service.
Oct 20, 16:20 BST
Monitoring - All affected services have now been moved off the impacted cloud zone, which has greatly reduced the impact on our platform.

The underlying Google Cloud incident is still ongoing, so this incident remains open while we continue to monitor closely. Customers may still see some intermittent processing issues during this time.

We will provide a further update shortly.
Oct 20, 11:16 BST
Update - We have identified additional impact related to this incident:

Payouts: Payouts created since approximately 07:00 BST are currently showing as pending.
Accounts: The transaction list in Accounts is not currently updating to show recently processed transactions.

We are continuing to work on mitigating the impact. The impact described in previous updates remains in place.

We will provide a further update within 30 minutes, or sooner if the situation changes.
Oct 20, 10:20 BST
Update - We have confirmed that this issue is related to an ongoing incident with our cloud provider, Google Cloud. We are monitoring their progress closely and continuing to mitigate the impact on our services.

There is no change to the impact described in our previous update. We will provide a further update within 30 minutes, or sooner if the situation changes.
Oct 20, 09:37 BST
Update - We are continuing to work on a fix for the issue affecting one of our cloud zones.

Webhook delivery has been failing since approximately 07:00 BST. We have now moved webhook services to unaffected infrastructure and are monitoring their recovery.

Open banking payments are still affected, and some customers may see failed or delayed open banking payments.

We will provide a further update within 30 minutes, or sooner if the situation changes.
Oct 20, 09:08 BST
Update - We are continuing to work on a fix for the issue affecting one of our cloud zones.

We will provide a further update within 30 minutes, or sooner if the situation changes.
Oct 20, 08:54 BST
Identified - We are currently experiencing a partial degradation of service caused by an issue with one of our cloud zones.

Our automated failover has activated and our engineering team is actively rerouting traffic to healthy infrastructure. Some customers may experience intermittent errors or increased latency while this takes effect.

We will provide a further update shortly.
Oct 20, 07:40 BST

Oct 19, 2026

No incidents reported.

Oct 18, 2026

No incidents reported.

Oct 17, 2026

No incidents reported.

Oct 16, 2026

No incidents reported.

Oct 15, 2026

No incidents reported.

Oct 14, 2026

No incidents reported.

Incident History Powered by Atlassian Statuspage