On October 21st, 2026, a security vulnerability was discovered in PHP, a technology used by a large part of the internet, including parts of Famly. This article explains what happened and what it means for your setting.
What is PHP?
PHP is a programming language that powers a huge number of websites and apps across the internet. It’s not something you’d ever interact with directly, but it works quietly in the background to keep things running. When a vulnerability is discovered in a technology like PHP, it means there’s a potential weakness that could, in theory, be exploited by bad actors.
Was Famly Affected?
Famly uses PHP in parts of the platform, so when the issue was made public, we acted immediately. Here’s what happened:
As soon as the vulnerability became known, we added extra safeguards to protect Famly while a permanent fix was being prepared
When the official fix was released, we tested it straight away and rolled it out across Famly the same day
Our engineering team monitored our systems throughout the day and found no signs of any direct risk to Famly or its data
Is My Data Safe?
Yes. Your data, and the data of the children and families at your setting, remained safe and protected throughout. Famly stayed available as normal and there was no disruption to service.
Do I Need to do Anything?
No. There is nothing you or your team need to do. The issue has been fully resolved, and Famly is safe to use as normal.
Still Have Questions?
If you have any questions, or your IT team would like more technical detail about what happened, reach out to us via the in-app chat or at support@famly.co, and we’ll be happy to help.