Major incident
Northwestern Information Technology: PHP Application Services Temporarily Unavailable
Oct 21, 2026, 14:26 UTC
started
open
no update since October 23, 2026
—
duration
Affected: ECATS (Student Information Systems), Facilities Connect (Facilities), Faculty Recruitment System (Human Resources Systems), OnBase (Workflow and Document Management)
Current status of Northwestern Information Technology: Under maintenance — live Northwestern Information Technology status
Timeline
- Oct 21, 2026, 14:26 UTCidentifiedSeveral University systems that rely on the PHP application environment are currently unavailable while application security patching is in progress. Northwestern IT is working to complete the patching and restore service as quickly as possible. Northwestern IT systems currently known to be impacted include, but may not be limited to: -Student Opportunity Application Portal (SOAP) -Graduate Student Progress (GSP) -Northwestern Loan Applications -ECATS UI -OnBase SSO for select forms, including HR Ops and CAESAR Access -Diploma Validation Widget -Facilities Connect Offcycle Runner We apologize for the disruption and will provide an update when service has been restored.
- Oct 21, 2026, 14:30 UTCidentifiedWe are continuing to work on a fix for this issue.
- Oct 21, 2026, 16:12 UTCidentifiedApplication security patching is continuing. The following applications have been patched and are now back online: -Student Opportunity Application Portal (SOAP) -OnBase SSO for select forms, including HR Ops and CAESAR Access -Diploma Validation Widget -Graduate Student Progress (GSP) -Northwestern Loan Applications -ECATS UI -Facilities Connect Offcycle Runner Other Northwestern systems remain unavailable while patching continues. Systems currently known to be impacted include, but may not be limited to: -Faculty Recruiting System (FRS) -REDCap -Maxient -Northwestern Now -Northwestern Magazine Additional updates will be provided as patching progresses.
- Oct 21, 2026, 20:55 UTCidentifiedApplication security patching is continuing. The following applications have been patched and are now back online: -Student Opportunity Application Portal (SOAP) -OnBase SSO for select forms, including HR Ops and CAESAR Access -Diploma Validation Widget -Graduate Student Progress (GSP) -Northwestern Loan Applications -ECATS UI -Facilities Connect Offcycle Runner -Faculty Recruiting System (FRS) Other Northwestern systems remain unavailable while patching continues. Systems currently known to be impacted include, but may not be limited to: -REDCap -Maxient -Northwestern Now -Northwestern Magazine -CONDUITS Online Form Additional updates will be provided as patching progresses.
- Oct 22, 2026, 14:56 UTCidentifiedApplication security patching is continuing. The following applications have been patched and are now back online: -Student Opportunity Application Portal (SOAP) -OnBase SSO for select forms, including HR Ops and CAESAR Access -Diploma Validation Widget -Graduate Student Progress (GSP) -Northwestern Loan Applications -ECATS UI -Facilities Connect Offcycle Runner -Faculty Recruiting System (FRS) -Maxient -Northwestern Now -Northwestern Magazine -REDCap Other Northwestern systems may remain unavailable while patching continues. Systems currently known to be impacted include, but may not be limited to: -CONDUITS Online Form The next update will be provided by 14:00 PM CDT, 10/22/2026.
- Oct 22, 2026, 18:15 UTCidentifiedApplication security patching is continuing. The following applications have been patched and are now back online: -Student Opportunity Application Portal (SOAP) -OnBase SSO for select forms, including HR Ops and CAESAR Access -Diploma Validation Widget -Graduate Student Progress (GSP) -Northwestern Loan Applications -ECATS UI -Facilities Connect Offcycle Runner -Faculty Recruiting System (FRS) -Maxient -Northwestern Now -Northwestern Magazine -REDCap Other Northwestern systems may remain unavailable while patching continues. Systems currently known to be impacted include, but may not be limited to: -CONDUITS Online Form The next update will be provided by 11:00 AM CDT, on Friday, October 23.
- Oct 23, 2026, 16:02 UTCidentifiedApplication security patching continues. The following applications have been patched and are now back online: -Student Opportunity Application Portal (SOAP) -OnBase SSO for select forms, including HR Ops and CAESAR Access -Diploma Validation Widget -Graduate Student Progress (GSP) -Northwestern Loan Applications -ECATS UI -Facilities Connect Offcycle Runner -Faculty Recruiting System (FRS) -Maxient -Northwestern Now -Northwestern Magazine -REDCap Other Northwestern systems may remain unavailable while patching continues. Systems currently known to be impacted include, but may not be limited to: -CONDUITS Online Form The next update will be provided by 12:00 PM CDT on Monday, October 26.
Updates as published by Northwestern Information Technology (original).
Other services with incidents at the same time
This was part of a wider event: 109 services reported incidents within the hour.
- Brivo 15:24 UTC · Degraded Performance -- Brivo Smart Home & Brivo Mobile Key
- Zapier 15:21 UTC · Delayed real-time updates in Zapier Tables
- Sucuri 15:14 UTC · PHP Security Advisory: Critical remote code execution vulnerabilities
- Fasthosts 15:10 UTC · Security maintenance: Short interruptions possible on PHP-based services
- Workable 15:08 UTC · E-signature service disruption
- Twilio 15:07 UTC · Customer's Unable to Create New Requests for Hosting and Porting
- Auvik Networks 15:06 UTC · PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619)
- Webland 15:04 UTC · Kritische PHP-Sicherheitslücke (PHP2Shell) – Schutzmassnahmen eingeleitet
- Akamai 15:03 UTC · Customer Security Advisory: PHP Remote Code Execution Vulnerabilities
- Duolingo 14:57 UTC · Duolingo is experiencing increased errors
- Cloud Security 14:56 UTC · [Cisco Umbrella & Cisco Secure Connect] Secure Web Gateway Degradation
- GitHub 14:52 UTC · Delays for Pull Requests and Webhook deliveries
- Akamai 14:52 UTC · NetStorage issues in Los Angeles
- Staffbase 14:52 UTC · [All Systems] [Security Advisory] – Critical PHP vulnerabilities — no customer-facing service impact
- Deputy.com 14:47 UTC · Unable to submit forms throughout platform
More Northwestern Information Technology incidents
- October 23, 2026 Arthur Rubloff Building Firewall Service Interruption
- October 22, 2026 Secure Sites (NUPortal, NUInfo) Outage
- October 21, 2026 eduroam new device registrations - BYOD
- October 16, 2026 Intercampus Connectivity - Reduced Capacity
- October 14, 2026 Cognos and Research Portal Service Interruption
- October 13, 2026 NU Listserv Service Interruption