Skip to content
Welcome, thoughtbot's Giant Robots listeners!Start here
Charité
AI-generated illustration
OrganisationDE

Charité

Berlin university hospital, one of Europe's largest.

Berlin's Charité went offline before fixes arrived for two critical PHP flaws on 21 October 2026. Reporting did not establish whether an attacker had compromised it.

Last refreshed: 22 October 2026 · Appears in 1 active topic

Key Question

Which hospital services can stay available during an emergency web-platform shutdown?

Timeline for Charité

#15 21 Oct

Took services offline before a fix existed

Cybersecurity: Threats and Defences: PHP2Shell: no fix for PHP 8.1 and older
View full timeline →

Background

Charité - Universitätsmedizin Berlin is a public university hospital spanning four campuses in the German capital. It combines patient care, medical teaching and research through about 100 departments and institutes.

The Charité group reported 25,256 employees in its 2025 figures, including 5,882 researchers and physicians. The hospital and medical faculty therefore combine clinical services with a large research workforce. Its public presence includes websites and online services alongside clinical systems.

During the October 2026 PHP2Shell response, Charité took services offline while administrators addressed two critical flaws. Public reporting described precautionary downtime and did not confirm that an attacker had compromised clinical systems or accessed patient data.

Common Questions
What is Charité in Berlin?
Charité - Universitätsmedizin Berlin is a public university hospital and medical faculty spanning four Berlin campuses.Source: Charité
How large is Charité?
Charité reported 25,256 employees across its group and about 100 departments and institutes at the end of 2025.Source: Charité
Why did Charité services go offline during PHP2Shell?
Charité took services offline while administrators addressed the critical PHP flaws; reporting did not identify a successful compromise.Source: The Record
Source Material

Written with AI from Lowdown's published reporting. Not individually reviewed by an editor. Updated 22 October 2026. Editorial standards.