Several public institutions and agencies in the Baltic States took their websites offline on 21 October 2026 due to global critical security vulnerabilities in PHP-based applications. In Estonia, the Ministry of Education and Science shut down access to the online learning platform, Moodle, temporarily, ERR reported. Also, the National Archives of Estonia closed or limited access to many of its online services. Veikko Raasuke, senior solutions architect at the Estonian Information System Authority (RIA), assured that essential websites in Estonia’s state and public sectors were protected, ERR reported.
Meanwhile, several ministries and other state institutions in Latvia took their websites offline, LSM reported. At least 165 websites of state and local government institutions were shut down temporarily as a precautionary measure. Also, Latvia’s public broadcaster, Latvian Public Service Media (LSM), suspended the operations of its websites. In Lithuania, the Centre of Registers (VIRC) suspended some services temporarily, BNS reported. The National Cyber Security Centre (NKSC) identified around 100 websites of both state institutions and private businesses as vulnerable to the PHP security flaw.