News

Dear Valued Customers,

Thank you very much for using SpiderPlus services.

We are pleased to announce that all countermeasures and safety verification procedures in response to the PHP vulnerabilities have been successfully completed. As of Friday, October 23, 2026, at 20:00 (JST), all targeted services have been fully restored.

The resumption schedule for each service was as follows:

• SPIDER+ / S+Report / S+BIM / S+Collabo: Friday, October 23, 2026, at 17:00 (JST) (All servers)
• S+Partner: Friday, October 23, 2026, at 20:00 (JST)

We once again offer our deepest apologies for the prolonged disruption and the significant impact this caused to your operations on site. We also extend our sincere gratitude for your patience and cooperation throughout this period.

At this time, we have confirmed no security breaches or data leaks resulting from this incident.

Important Notes for Resumed Use

• No special action or system reconfiguration is required on your part. All services are available for use as usual.
• All data registered on our servers prior to the suspension remains fully intact and safely retained.
• If you have unsynced data remaining on your iPad or iPhone app, please sync and register it to the server.
• If you notice any unusual behavior while using the applications, please contact our Customer Support Center. Should any system-side issues be confirmed, we will reach out separately.

Past Updates & Timeline

[Update 2 | Friday, October 23]

Following the emergency suspension initiated at 8:00 (JST) on Thursday, October 22, 2026, services were sequentially resumed starting from servers where safety was verified. To ensure complete security, restoration was conducted progressively on a server-by-server basis rather than simultaneously, with individual notifications sent to customers upon their server’s completion.

• Sequential Restoration Targets: SPIDER+, S+Report, S+BIM, S+Collabo
• S+Partner: Remained unavailable while corrective measures were underway.
• System restrictions prior to restoration: Web (PC) version was unavailable; iPad/iPhone apps could not connect to the server or synchronize data.

[Initial Notice | Thursday, October 22]

Services were temporarily suspended starting at 8:00 (JST) on Thursday, October 22, 2026, to perform emergency maintenance addressing the vulnerabilities in the PHP programming language reported on October 21 (CVE-2026-109618, CVE-2026-109619).

Background of the Service Suspension

This service suspension was executed as a proactive preventative measure determined by our management to ensure the security and protection of our customers’ valuable data.

On October 21, 2026, vulnerabilities (CVE-2026-109618, CVE-2026-109619) were publicly disclosed regarding PHP, the programming language utilized across our platforms. SpiderPlus decided to suspend services until comprehensive safety could be verified, followed by sequential restoration as security patches and checks were completed server by server.

Future Measures

We will continue rigorous monitoring of our servers following this full resumption. Furthermore, in light of this event, we are reviewing and strengthening our operational frameworks to ensure prompt responses to similar potential vulnerabilities going forward. If any new information arises that requires disclosure, we will notify you through our website.

Thank you very much for your continued partnership and support of SpiderPlus.

Inquiries & Support

If you have any questions or concerns regarding this matter, please contact us at:

• For Customers in Vietnam:
  Please contact us via our inquiry form:
  https://spiderplus.vn/#contact
• For All Other International Customers:
  Email: global-sup@spiderplus.co.jp