Trust Centre

GBG is aware of the recently disclosed PHP vulnerabilities, commonly referred to as “PHP2Shell”, which could allow an unauthenticated attacker to execute commands on an affected system.

We received advance notification from our threat intelligence partners and promptly activated our incident response processes.

All GBG systems identified as potentially exposed have been updated. We have also implemented additional precautionary measures, including enhanced monitoring, threat hunting for indicators of compromise associated with PHP2Shell, and ongoing vulnerability scanning across our systems.

To date, we have identified no evidence that GBG systems have been compromised or that these vulnerabilities have been exploited within our environment.

We appreciate that customers may have specific questions, which we will be happy to address. Given the volume of enquiries relating to this matter, we may not always be able to respond within requested timeframes. We appreciate your understanding as we work to respond to individual requests as promptly as possible.

We continue to monitor developments closely and will take further action should any additional risks be identified.

We are proud to announce, ExpectID has successfully maintained SOC2 Type II audit report. The report is now available on the certifications page of the GBG Trust Centre

We have completed a thorough review of our systems and confirmed that no externally facing systems are impacted by the recently reported React vulnerabilities. We will continue to monitor guidance from our security partners and take any necessary actions to ensure ongoing protection.

We are pleased to share the exciting news that GBG has strengthened our ISO27001:2022 certification by further certifying our ISMS globally. Additional entities have been included to further demonstrate our compliance and previous certifications for GBG Atlanta, GBG Manchester, NH and GBG Canberra are now retired and covered by this new certification. This work enables our customers and partners to confidently and efficiently know our ISO27001:2022 status.

Our new Certificate and Statement of Applicability are now uploaded to the Trust Centre.

We are proud to announce, ExpectID has successfully maintained SOC2 Type 2 audit report. The report is now available on the certifications page of the GBG Trust Centre