PHP Vulnerability Responses by Company

Zellis UK Limited

Companies / web services
Aliases / services
Zellis / NorthgateArinso UK / Northgate HR / Rebus HR / Peterborough Software / Zellis UK Limited
Official website
https://www.zellis.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

MOVEit file-transfer workflows for certain customers

Response status
Not listed
Response information checked
2026-10-29

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-29

A MOVEit vulnerability in May–June 2023 affected a small number of bespoke customer workflows. The server was disconnected and investigated; Zellis-developed software was unaffected, so this is not a claim of a service-wide payroll leak.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Affected customers were offered a dedicated helpdesk and identity-protection support. Consult the employer’s individual notice and available support.

Official service URL

Source URLs

  1. FY2024 interim statement on MOVEit incidenthttps://www.zellis.com/wp-content/uploads/2025/11/Zellis-Mid-Year-Statement-FY24-May-Oct-2023.pdfService and operation documentation
Related official sources
  1. Operator and company informationOfficial information directoryIdentifies Zellis UK Limited and the stated service scope.
  2. FY2024 interim statement on MOVEit incidentOfficial information directoryA MOVEit vulnerability in May–June 2023 affected a small number of bespoke customer workflows.

Comments