Major company hacked via PHP flaw by...?

This market will resolve to “Yes” if, between market creation and the listed date, 11:59 PM ET, a major company is confirmed to have been breached through the exploitation of a vulnerability in PHP. Otherwise, this market will resolve to “No”. A qualifying vulnerability is any vulnerability in PHP itself, meaning the PHP interpreter and the extensions bundled in the official php-src source code, including but not limited to CVE-2026-109618 and CVE-2026-109619 (known as “PHP2Shell”). Vulnerabilities in third-party software written in or running on PHP (for example, WordPress, Laravel, Drupal, plugins, or other frameworks and libraries) will not qualify. A major company is a company with a market capitalization of at least $1 billion (for publicly traded companies, as of the date the breach is confirmed) or a most recent publicly reported valuation of at least $1 billion (for privately held companies), or a wholly owned subsidiary of such a company. Government entities, non-profit organizations, and other non-commercial bodies will not qualify. A breach means unauthorized access to, or control of, the company's systems or data, achieved by exploiting a qualifying vulnerability. Precautionary shutdowns, patching, scanning, and attempted attacks that did not result in unauthorized access will not qualify. To qualify, the breach and its attribution to a qualifying vulnerability must be confirmed within this market's timeframe by at least one of the following: - An official statement from the affected company - A regulatory filing by the affected company (for example, a Form 8-K filed with the US Securities and Exchange Commission) - An official advisory or statement from CISA or another national cybersecurity agency that identifies the affected company - Credible reporting that cites the affected company, or a national cybersecurity agency, as confirming the breach Anonymous or unconfirmed claims, including claims made by hacking or ransomware groups, will not qualify on their own. The resolution source for this market will be the sources listed above.