Is TeamLinkt Down?

The final security patches have become available and have been successfully applied to the fleet of servers powering the League sites. Initial findings have not uncovered any form of unauthorized access to your data, or that the vulnerability was exploited. We will continue to research and will notify customers if we find something. At this time, we consider the incident resolved and apologize again for the inconvenience caused today. We made the uncomfortable decision to temporarily break product functionality in order to protect your data. --- [2026-10-21T18:32:03Z] (monitoring) Security patches have been applied. We are resolving this issue. Again - we apologize for the inconvenience and trouble this has caused our customers. Your account and data security remains our utmost priority. As we previously stated - this was a global security vulnerability in a specific piece of technology used by nearly 40% of the internet. The issue did not originate within TeamLinkt or its processes. We updated and patched our systems as quickly as possible, while having to temporarily degrade the platform functionality to keep your data secure. There is no evidence that your account was every accessed in an unauthorized manner. Please do not hesitate to reach out to our support team if you have any questions. --- [2026-10-21T18:10:04Z] (monitoring) We have deployed a different mitigation to bring the platform back online in its entirety. All registration functionality is now restored. The security patches are currently being tested and will roll out shortly. This will fully resolve the incident and associated risk. --- [2026-10-21T16:11:20Z] (monitoring) A security issue affecting widely used software has prompted us to temporarily limit certain TeamLinkt features while updates are applied. Our team is taking precautions to protect your information and restore normal functionality as quickly and safely as possible. No action is required on your end. Additional details are outlined below, and we’ll share further updates as they become available. Thank you for your patience and understanding. **How we got here** On October 20th, we were made aware of a significant security vulnerability in our primary programming language, PHP. The security advisory was a very short-notice announcement of pending security patches being made available on the 21st at 14:00 UTC. It has become apparent that the vulnerability was not made through responsible disclosure channels, which has caused the PHP maintainer team to frantically release patches this morning. These large-scale security issues are rare, but can have a detrimental impact on platforms such as TeamLinkt. It is our absolute top priority to protect and guard your data even at the temporary expense of functionality. **What is it / What is the impact?** The root cause of the vulnerability is the ability for an attacker to completely bypass any and all authentication and authorization checks for any server running PHP and then execute code on that device. In simple terms, this would allow an attacker to upload a fake file into TeamLinkt's platform, and potentially exfiltrate and steal user and contact information. We do not believe this to have happened on our systems, based on our initial investigations. **What we've done so far** The mitigations we have put in place to keep the platform running, but degraded, means that any and all forms where potentially files could be uploaded, or the form itself is long (e.g. Registration), have had to been disabled to protect customer data. We are currently waiting on security patches to make it through not only our build and test pipelines, but also the upstream vendors we rely on that make these patches available for deployment. Until this time, we must keep the system in a degraded, but secure state. We are monitoring the PHP issue affecting TeamLinkt users while we wait for patches to become available. At this stage, there is no indication that the issue originates from our systems. We will continue to track progress and provide updates as more information becomes available. Again, we apologize for the inconvenience and frustration this causes. We will release patches as quickly as they become available and we have tested them. --- [2026-10-21T13:56:55Z] (monitoring) Due to a severe security issue with the programming language TeamLinkt uses, we have temporarily disabled the majority of upload capabilities until we can apply patches. We've made this decision in order to protect you and your data. Security patches are due at 14:00 UTC today, and we hope to apply them shortly afterwards. After the patches are applied we will provide a more extensive write up and explanation.

Monday, August 24th, TeamLinkt was notified by several hockey customers that parents and players were unable to complete registration for the upcoming hockey season when attempting to register for secondary / sub organizations. TeamLinkt verifies membership association with hockey organizations to ensure players are only able to register for teams they are rostered for. This data primarily comes from the Hockey Canada API. TeamLinkt started investigating this issue on Monday around 1.30pm Saskatchewan and was able to quickly verify that the Hockey Canada API was no longer returning sub organization membership data. Meaning, Player A belonging to both Organization A and Sub Organization B, we would not longer be able to verify the sub organization membership and would fail registration with a message stating that the membership could not be found. We escalated the HCR API issue to Hockey Canada, they were able to identify it on their side and pushed a fix out late afternoon on the 25th, that restored functionality. We apologize to our customers for the inconvenience to our customers for the interruption in registration flow.