Dear Customer,
At Campbell Associates, we take the security of our systems, products, services and customer data extremely seriously. We are aware of the reported vulnerability and our IT security team is actively following the guidance issued by the UK National Cyber Security Centre (NCSC).
Following the disclosure, our IT security team initiated a review of our infrastructure to assess any potential exposure and identify appropriate mitigation measures.
While a limited number of components within our infrastructure utilise PHP technology, the majority of our core business systems operate within internal network environments or through established software and CRM platforms. This significantly limits the potential exposure of our wider infrastructure.
As part of our response, we are:
– Reviewing potentially affected systems and services to identify any exposure to the reported vulnerability.
– Following the latest NCSC security recommendations and guidance.
– Assessing and implementing appropriate mitigation measures where necessary.
– Continuing to monitor our systems for any indications of suspicious activity or potential security risks.
At present, we have no evidence to suggest that these vulnerabilities have resulted in any compromise of company data.
We will continue to review the situation and take any further action necessary to maintain the security and integrity of our systems and services.
For reference, the NCSC guidance can be found here:
Please be assured that maintaining the security of our environment and protecting the information entrusted to us remain key priorities for Campbell Associates.
Thank you for your continued trust and understanding.
Kind regards,
Campbell Associates
Published update: 23 OCT 26 15:43
PHP Vulnerability Update
We have now received confirmation from nearly all our software suppliers regarding the recently reported PHP vulnerability.
Our team and suppliers responded promptly, with most completing security checks and implementing necessary patches on the same day the vulnerability became known.
We are confident that our systems and customer data remain secure, with no evidence of any data breach identified to date.
We will continue working closely with our suppliers to complete the remaining checks, address any outstanding actions and ensure the matter is fully resolved as soon as possible.
