Nepal government websites (GIWIMS shared platform), Nepal Rastra Bank, Department of Revenue Investigation (VCTS): AI incidents on the record

Every entry, with its source

• Oct 21–26 Took services offline PHP2Shell: AI-found PHP flaws leak, trigger global shutdowns. Thousands of government sites on the shared GIWIMS platform taken offline centrally, with the central bank's website and web services and the freight-tracking system VCTS; restoration expected between Sunday evening Oct 25 and Tuesday Oct 27 after a central patch and audits. Systems not using PHP returned from Oct 22. Oct 26: the SDOC says most government portals are back after a central patch and audits; the Medical Education Commission's website and the Nagarik app remain unavailable and some vendor-managed sites are still offline. (Kathmandupost) The incident →

If you're a customer or employee

1. This was a precaution.The organisation switched services off or restricted them while it fixed a flaw. No loss of data is recorded.
2. Use official channels for service updates.Check the organisation's own website or social accounts to see when services return.
3. Ignore "restore your access" messages.Outages attract scams offering to help. Don't click links in unexpected messages.

Related: AI scam texts: what to do · The fake bank call

How to read this

"Confirmed" means the organisation or an investigator confirmed a compromise. "Attacked" means attacks or attempts were recorded, including blocked ones. "Took services offline" means a precaution, not a breach. We only list what public sources say; if something here is wrong or out of date, tell us and we will correct it.

Spot an error or something out of date? Tell us; corrections are made and logged. Written with AI assistance from public sources; awaiting fact-check and approval by Colin Balfe. General information, not legal, medical or financial advice.