Netherlands takes DigiD and MijnOverheid offline over PHP flaws
On 21 October Logius preemptively shut down DigiD, MijnOverheid and Overheid.nl after two critical PHP vulnerabilities were disclosed. No exploitation had been observed; the sites returned after PHP patches 8.5.12, 8.4.27, 8.3.36 and 8.2.35 landed around 16:00 local time.
- DigiD, MijnOverheid.nl and Overheid.nl were taken offline; the Tweede Kamer site was also down
- NCSC had seen no signs of exploitation before the shutdown
- PHP fixes arrived around 16:00 Dutch time and services were restored by evening
- Hospital, municipal and RTL sites were affected in the same wave
Read next
Security