Idaho Department of Fish and Game limits website functionality due to cyber threat

The Idaho Department of Fish and Game (IDFG) has implemented precautionary cybersecurity measures by replacing its website’s full functionality with a minimal, static webpage. This action follows national alerts regarding vulnerabilities in PHP, an open-source software provider.

The security flaws, identified as “PHP2Shell,” were discovered by researchers using AI-assisted analysis tools. While an emergency patch was issued on October 21, 2026, the provider subsequently warned of an additional unpatched security concern. In response to these developments, the National Security Agency advised state agencies and other organizations to take vulnerable systems offline, enhance network logging, and retire outdated software.

Despite the reduced site functionality, IDFG continues to provide essential information for hunters and anglers, including seasonal rules, licensing access, and hunter education resources. The agency is following national guidelines to safeguard public data and maintain system stability.