Virtuagym outage history

Dear customer, As you may have seen in the news, a major security vulnerability has been discovered that affects a large share of websites and online services worldwide, including ours. Your data's safety is our top priority. Like many other companies and organizations, including several Dutch government services, we have temporarily paused our service as a precaution while we apply the necessary security patches. We want to reassure you that the Virtuagym software and services have not been compromised, and neither has your members' data. This pause is purely preventive. What this means for you: While the service is offline, you and your members won't be able to log in, book classes or use the app. We recommend: Letting your members know about the temporary interruption. Planning a manual alternative for check-ins and bookings, if needed We know how important our platform is to your business, and getting it back up and running is our highest priority. We will only restart the service once these security patches are in place and we're confident your data is protected. You can follow the latest updates here. We'll also email you again as soon as the service is available.

We are continuing to investigate this issue.

The global PHP development team has released an official patch for the vulnerability that led us, and many other companies, to take our system offline as a precaution. PHP is the widely used programming language that our platform is primarily built on. The Virtuagym system and your data have not been compromised. Our engineers are now investigating the patch and how to apply it to our platform. We’re still committed to bringing the service back as soon as possible, and we’ll only do so once we’re confident the vulnerability has been fully resolved.

Our team is making good progress on the updates for the PHP vulnerabilities. These are the vulnerabilities that led us, like many other companies, to pause our service as a precaution. We’re now in the first phase of testing, making sure the updates can be applied without significantly affecting the service. Virtuagym and your data have not been compromised. We’ll post another update here as soon as testing is complete.

Testing of the security updates has gone well. Based on where we are now, we expect the full service to be back online between: 22:00 – 22:30 CEST (Amsterdam) 21:00 – 21:30 BST (London) 16:00 – 16:30 EDT (New York) 07:00 – 07:30 AEDT (Sydney/Melbourne), Thursday 22 October 09:00 – 09:30 NZDT (Auckland), Thursday 22 October We’re running a final round of tests now. These will confirm whether we can go ahead and bring the service back.

During our final round of testing, we found an issue that we want to resolve before bringing the service back online. This means we need a little more time for additional testing, and the service won’t be back within the time window we shared earlier. The issue is not a new security risk. Our system and your data have not been compromised. We just want to be sure everything works as it should once we go live. Our team remains fully focused on patching the vulnerabilities and restoring the service as soon as possible. We’ll keep you informed on our progress here. We’re sorry for the inconvenience and thank you for your patience.

Additional testing is complete, and we expect the service to be back online within the next 10 to 25 minutes: 00:10 – 00:25 CEST (Amsterdam), Thursday 22 October 23:10 – 23:25 BST (London), Wednesday 21 October 18:10 – 18:25 EDT (New York), Wednesday 21 October 09:10 – 09:25 AEDT (Sydney/Melbourne), Thursday 22 October 11:10 – 11:25 NZDT (Auckland), Thursday 22 October We’ll post another update here as soon as the service is fully available.

Good news: Virtuagym is back online and most services are available again. During the interruption, our team implemented the necessary patches for the PHP vulnerabilities that have affected websites and online services worldwide. These are the vulnerabilities that led us, like many other companies, to pause our service as a precaution. Our system and your data have not been compromised. You and your members don’t need to take any further action. A few features will stay offline a little longer: Booking through the new schedule widgets, and bookings made by external systems directly in the new schedule. Booking classes through the Virtuagym apps works as normal. The Goals feature is temporarily unavailable. External integrations with the Lead module, such as lead forms on your website, are temporarily unavailable. Our team is actively working on resolving these remaining issues and will restore each service individually as soon as the necessary security updates have been completed. Everything else, including check-in, automated payment runs, the webshop, and class booking and cancellations, works as normal. We’ll continue to monitor service performance closely and post updates here on our status page as each feature comes back. Thank you for your patience and understanding. Best regards, The Virtuagym team

The Lead module and the new schedule are fully operational again. This includes: Lead forms and other external integrations with the Lead module Booking through the new schedule widgets, and bookings made by external systems in the new schedule We don’t expect any further limitations on these services. The Goals feature is still temporarily unavailable. We’ll post an update here as soon as it’s back. Once more we want to thank you for your patience.

The Virtuagym platform is now fully operational. The Goals feature is live again, and this was the last service still affected by the pause. To confirm once more: the Virtuagym system and your data have not been compromised. Like many other companies worldwide, we paused our service purely as a precaution, while we applied the security patches for the PHP vulnerabilities. You and your members don’t need to take any action. We’re closing this incident. We’ll keep monitoring the platform closely and will post here if anything changes. Once again, thank you for your patience and understanding.

We’re currently experiencing an outage in the Appointment Schedule. Our team is investigating the issue and working to restore normal performance as soon as possible.

We identified the issue and deployed a fix. The Appointment Schedule should now be working as expected again. We’ll continue to monitor the situation closely to make sure the issue does not occur again.

The incident has been resolved.

We are currently investigating a spike in web and api request errors.

A database lock prevented any other operation from completing. The lock has been released and we are now monitoring. All components are back to normal operation.

This incident has been resolved.

We're currently investigating an issue that is preventing customers from downloading SEPA files. We expect to identify the reason and issue a fix as soon as possible. Apologies for the inconvenience that this is bringing.

A fix has been implemented and we are monitoring the results.

This incident has been resolved.

We are currently experiencing an issue affecting all Android applications, including Fitness, Food, Coach, Touch, and Custom Mobile Apps (CMA). Due to a connectivity problem, users may be unable to log in, sync data, view schedules, or access other app features and services.

We are continuing to investigate this issue.

Our team has identified the cause and released a fix, which is currently being rolled out through updated app versions. For our standard Android apps (Fitness, Food, Coach, and Touch), the update is currently being made available to users. Custom Mobile Apps (CMA) are also affected. The rollout of updated CMA versions is currently in progress and remains our highest priority. We will continue to provide updates on this page as more information becomes available. We sincerely apologize for the inconvenience and appreciate your patience while we work to fully resolve this issue.

Updated versions of the Food and Coach Android apps are now available, and users who install the latest version can use the apps normally again. A number of Custom Mobile Apps (CMA) have also been updated and are operational. To restore functionality, affected users must update their app to the latest version available in the Google Play Store. The rollout for the remaining Android apps and CMA versions is still in progress.

Rollout of the updated Android app versions is progressing as planned. Additional apps are continuing to become available through the Google Play Store. Affected users will need to update their app once the updated version becomes available. We will continue to provide updates as the rollout progresses.

The Android connectivity issue has been resolved, and affected apps are operational again. The issue was caused by an external change affecting Android applications. Service has since been restored, and users should now be able to log in, sync data, access schedules, and use app functionality normally. As an additional preventative measure, we will continue rolling out updated app versions across all Android apps and Custom Mobile Apps (CMAs) to reduce the risk of similar issues occurring in the future. If you are still experiencing issues, please contact our support team at [email protected]. We sincerely apologize for the inconvenience and thank you for your patience throughout this incident.

Our activity-instances database experienced connection exhaustion during peak traffic, causing errors on mobile API endpoints (food, activity, plans) and Fitbit sync. Idle connections accumulated beyond the server's limit, leading to rejected requests and degraded performance. The issue has been resolved by adjusting connection timeout and limit parameters. All services are operating normally.

We identified an issue affecting payment processing, primarily related to Mollie payments which has increased system load following a third party outage. We are currently investigating.

As a result of a payment provider outage, a large number of requests were sent to our payment webhook endpoint, which led to increased database load. We have reduced the number of workers processing these requests to prevent further overload and stabilize the system.

Performance levels have now stabilised but we keep on monitoring in the following hours to act if necessary.

This incident has been resolved.

We are investigating an issue where some iDEAL payments made via invoice payment links fail when clients are not logged in. The cause has been identified and a fix is currently being worked on.

We have deployed a fix for the issue and are actively monitoring the system to ensure stability. At this time, all services are operating as expected.

This incident has been resolved.

We are currently investigating an issue with our database performance.

A fix has been implemented and we are monitoring the results.

This incident has been resolved.

After the scheduled deprecation of outdated TLS 1.0 and 1.1 protocols to enhance platform security, some clients reported that their Check-in Clients could no longer connect, displaying the message “Server couldn’t be reached.” Initial investigation confirmed that affected clients were running outdated Check-in Client versions that do not support the new TLS configuration. While the Virtuagym Portal remains functional, the legacy Check-in applications (pre-1.4.8) are unable to establish connections under the updated standards. Engineering is currently verifying whether any configurations deviate from the tested setups. Customers experiencing connection issues are advised to engage with our hardware and integrations specialist through Customer Success. Further updates will be provided as the team completes troubleshooting and determines whether a rollback or fix is required.

Following the scheduled maintenance to disable outdated TLS 1.0 and 1.1 protocols on November 5th at 09:00 UTC, a few reports were received indicating that certain Check-in Clients were unable to connect to the server. Investigation determined that these incidents were not caused by the TLS protocol update. The affected setups were running unsupported or misconfigured Check-in Client versions, which were unable to establish secure connections due to local configuration issues. The TLS deprecation has been verified to operate as intended, and no rollback is required. Next Steps: • Monitoring continues to ensure system stability post-upgrade. • Configuration inconsistencies identified during the investigation are being tracked internally for follow-up.

We are monitoring a widespread AWS outage (https://health.aws.amazon.com/health/status) that may impact parts of our platform. At this time, we have not observed any platform degradation, but we are actively assessing our systems and will update if any impact occurs.

We are continuing to monitor the widespread AWS outage (https://health.aws.amazon.com/health/status). At this time, all components of our platform remain fully operational and we have received no reports of degraded performance or connectivity issues. We will keep monitoring the situation closely and will provide further updates if anything changes.

The downstream provider has resolved their incident.

We’re currently experiencing an issue where events in the appointment schedule are either not loading or loading very slowly. Our team is actively investigating the root cause and working to resolve the issue as quickly as possible. We’ll share an update as soon as we have more information.

We have found the cause and deployed a fix to production. We are now closely monitoring the system to make sure everything is working properly. Thank you for your patience.

This incident has been resolved.

We are currently experiencing an email sending outage due to an issue with a downstream provider. Our team is actively working to restore email sending capabilities as quickly as possible.

A fix has been implemented and we are monitoring the results.

This incident has been resolved.

Due to increased database load, we are currently experience some slowness of the app and web platform. The performance is improving for the last 30 minutes and will keep updating the status page as we move through the process.

The performance is back to the expected levels. We'll continue monitoring the situation and will implement new measures if necessary while updating this page.

The platform database load levels are stabilized for the last 12 hours. We sincerely apologize for any inconvenience this issue may have caused.

We're experiencing general Database Load issues due to high traffic that might impact general operations. We're looking into stabilizing these operations with the utmost urgency and will provide an update as soon as possible.

A fix has been implemented and now the connection pooling to the Database is improved. We'll continue monitoring the situation and will implement new measures if necessary while updating this page.

This incident has been resolved.

We are currently investigating an issue that prevents our replication system from operating correctly. This causes some partial degradation of services for our website.

A fix has been implemented and we are monitoring the results.

After extensive monitoring and some configuration changes as a result, the incident is now resolved.

We have identified an issue with database replication. This may affect some features in our web application such as SEPA downloads. We have identified a solution and it is being implemented.

Replication has been restored. We are now monitoring the replication status for anomalies.

The replication is running as expected.

Due to a technical issue, credit handouts for a small number of clubs are currently experiencing delays. Our team is actively working to resolve this, and we expect normal operations to resume shortly. We apologize for any inconvenience and appreciate your understanding.

This incident has been resolved.

We're experiencing general Database Load issues due to high traffic that might impact general operations. We're looking into stabilizing these operations with the utmost urgency and will provide an update as soon as possible.

A fix has been implemented and Database Load levels have stabilised. We'll continue monitoring the situation and will implement new measures if necessary while updating this page.

The measures we implemented have successfully stabilized database load levels. We sincerely apologize for any inconvenience this issue may have caused our clients.

We are experiencing issues with the appointment schedule, where some events have changed in activity since today. The team is investigating the situation to determine the root cause.

We have identified the root cause of the issue and will continue working on a fix tomorrow morning. Resolving this is our top priority, and we are committed to addressing it as quickly as possible. Currently, 40 portals are affected, but no data has been lost. Once the fix is implemented, the events will be displayed as originally intended. Thank you for your patience as we work to resolve this matter.

We have developed a fix that will address the majority of the affected events. It is currently under review and testing. We will provide an update once the fix has been deployed.

We have successfully deployed a fix that resolves the majority of the impacted events—over 4,000 events across 40 different portals. These events are now displayed as they originally were, based on the correct data. We still see 160 events that are not yet displaying correctly, and we are currently working on determining how to resolve these as well. We will provide an update tomorrow once we have more clarity on how to address the remaining events.

We have found a solution to restore the remaining 160 events. Our team is currently working on a fix, which will be deployed on Monday. Once completed, all events will be displayed correctly. We will provide a final update on Monday after the remaining events have been resolved.

We’ve just rolled out a fix that has also restored the remaining events. All events should now be displayed correctly based on accurate data. Thank you for your patience and understanding. If you experience any further issues, please don't hesitate to contact our support team.