On October 21, 2026, Indemo temporarily suspended access to its website, investment platform, and mobile application as a precautionary measure following reports of critical security vulnerabilities affecting PHP, a widely used technology supporting websites and online platforms worldwide.
We are pleased to confirm that all Indemo services have been fully restored, the necessary security updates have been completed, and investor funds and information remain secure.
Here is what happened, why we took preventive action, and how the situation was resolved.
Why Was the Indemo Platform Temporarily Unavailable?
On October 21, critical vulnerabilities were reported in PHP, a software component used by many online services, including Indemo. While there was no indication that Indemo had been compromised, these vulnerabilities presented potential security risks to platforms using the affected technology.
Following official guidance from CERT-EU, the cybersecurity service for EU institutions, Indemo made the decision to temporarily take its platform and servers offline until the necessary security updates became available. CERT-EU recommended considering the temporary isolation of internet-facing applications when immediate security fixes could not yet be applied.
This preventive decision was made to minimise potential exposure and maintain the security of our investors and platform.
What Actions Did Indemo Take?
Our technical team closely followed the official security announcements and prepared to implement the necessary updates as soon as they became available.
The process involved:
- Precautionary shutdown: Temporarily suspending access to the Indemo website, investment platform, and mobile application.
- Security updates: Applying the necessary PHP security fixes following their official release.
- Technical verification: Completing security checks to verify that the platform was operating as expected.
- Service restoration: Bringing all Indemo services back online once the updates and checks were successfully completed.
The official PHP security release was announced for October 21, 2026, as detailed in the PHP security announcement.
All Indemo Services Are Back Online
The maintenance has been successfully completed, and all Indemo services are fully operational again.
Our IT team has applied the necessary security updates and completed its verification checks, confirming that the platform is operating as expected. Investors can now access their accounts, review their portfolios, explore available investment opportunities, and use the Indemo mobile application as usual.
Importantly, the security threat did not compromise investor funds, personal data, or financial information.
No action is required from investors as a result of this maintenance.
Thank You for Your Patience
We understand that temporary interruptions to an investment platform can be inconvenient, and we sincerely apologise for the disruption. However, we believe that taking preventive security measures is preferable to leaving potential risks unaddressed. Protecting our investors, their information, and the reliability of our platform remains a priority for Indemo.
We would like to thank our investors for their patience and understanding throughout the maintenance period, as well as our IT team for its work in implementing the necessary updates and restoring services.
Indemo is back online, and normal operations have resumed.
Explore Investment Opportunities
The Indemo Team
This content is a marketing communication. It shall not be treated as investment advice, independent research or offer, recommendation or invitation to invest in the investment opportunities referred to herein. The content is not aimed at promoting services or products to persons based in jurisdictions where the distribution of said information would be illegal.
Investing in financial instruments involves risk, and there’s no guarantee that investors will get back invested capital. Moreover, past performance does not guarantee future returns. Indemo SIA shall not be responsible for any direct or indirect loss from using the provided information.