Is MindTickle, Inc. Down?

<b>Summary</b> • Two critical vulnerabilities in the PHP runtime (“PHP2Shell”) were publicly disclosed on Oct 21, 2026. • The Mindtickle platform, including customer learning sites and custom-domain deployments, is built primarily on Go, JavaScript, TypeScript, Python, and Java, and is not affected. <b>Affected component</b> • One supporting component used PHP: the backend service for the in-app “Report an issue” feedback form. It is separate from the help-article search and chat features in the same support panel, which run on other services and are not affected. • It serves the feedback form and receives a report when a user submits one. The service forwards the report to our support team’s helpdesk. • It runs separately from the core Mindtickle platform. It is not part of how learning sites are served, how users sign in, or how learning content and tenant data are stored or processed. It has no access to the systems that hold that data. <b>Remediation</b> • On Oct 23, 2026, we applied the mitigating configuration changes recommended in the PHP security advisory to reduce the risk of exploitation while we prepared the upgrade. • On Oct 24, 2026, we upgraded the component to PHP 8.3.36, the fixed release, across all production regions and verified the fix. • We also added a request-filtering control as a defense-in-depth measure. The component remained in service throughout, with no downtime. <b>Investigation</b> • We reviewed logs from Oct 20, 2026, the day before public disclosure, through remediation on Oct 24, 2026. • We found no evidence of exploitation and no evidence that any customer data was accessed or exposed. <b>No action required</b> • There is no need to rotate passwords, API keys, SSO settings, or integration credentials. • We continue to monitor and will update this page if anything changes. • For questions, supporting evidence, or a formal attestation, email <a href="mailto:infosec@mindtickle.com">infosec@mindtickle.com</a>.

The login issue affecting the platform has been resolved, and users can now sign in normally. The disruption lasted from 04:52 AM PT to 9:42 AM PT. No customer data was affected. Users who were already logged in to Mindtickle were able to access the platform without any concerns. We're sorry for the disruption this caused. If you're still unable to log in, please contact us @ mtsupport@mindtickle.com. We'll complete an internal postmortem and publish the RCA here within the next few days. --- [2026-09-21T08:46:12.584-07:00] (monitoring) Update: Login functionality has now been restored for the majority of users. We will continue to monitor the platform closely to ensure full recovery and stability. --- [2026-09-21T08:10:15.959-07:00] (monitoring) We are seeing signs of recovery, and some users should now be able to log in to the Mindtickle platform. We are continuing to monitor the recovery and work through the remaining impacted users. --- [2026-09-21T06:53:09.134-07:00] (identified) We have identified the root cause of the login issue and are currently working on a patch. --- [2026-09-21T06:13:53.024-07:00] (investigating) Users are currently unable to log in to the Mindtickle platform. Users who are already logged in are not impacted and can continue using the platform. Our team is actively investigating the issue.

The Salesforce-side outage has been resolved, and all affected workflows are now operating normally. --- [2026-09-16T06:33:28.829-07:00] (identified) We are aware of an issue affecting Salesforce-related workflows, caused by an ongoing outage on Salesforce's side. This is not the result of an issue within Mindtickle. What's affected: Customers using the Salesforce integration may see failures or delays in the following: 1. Salesforce Integration (SFDC): CRM data sync, user provisioning/sync, module/assets recommendations, and learner performance sync to Salesforce 2. Digital Sales Room: syncing opportunities, contacts, automatic room creation for Salesforce opportunities, and accounts from Salesforce, and writing room activity back to Salesforce. Core DSR functionality (creating and sharing rooms, content, analytics) remains available. 3. Call AI: mapping recordings to Salesforce records and showing Salesforce opportunity/account fields on a meeting once it's available, pushing call insights back to Salesforce, and Salesforce Dialer call capture. Core Call AI functionality (recording, transcription, insights) remains available. What's not affected: Non-Salesforce workflows, core product functionality, and customers not using the Salesforce integration are all operating normally. We are actively monitoring the Salesforce outage and assessing impact.