Bullhorn Takes Staffing Platform Offline to Contain Cyberattack
Bullhorn Takes Staffing Platform Offline to Contain Cyberattack 🚨
Staffing software company Bullhorn has disabled access to its platform to contain a cyberattack that caused a system-wide outage. The company states that it has isolated the issue and eradicated the immediate threat. Currently, its team is working diligently to restore services following thorough security reviews conducted with the help of CrowdStrike specialists. Bullhorn proudly serves more than 10,000 customers worldwide.
Incident Overview
According to a status page on the incident, customers began experiencing issues with job postings in the Bullhorn application on Friday. The following day, the company confirmed it was experiencing a system-wide outage affecting the Bullhorn platform, which was caused by a cyberattack. “We have detected a cyber incident on the Bullhorn Platform. We have temporarily disabled access to our systems in order to contain the activity while we investigate further,” the company stated in an update.
A forensic investigation has been initiated, and it has not yet been determined whether customer data was exfiltrated. Bullhorn has promised to notify affected individuals directly if a data breach is confirmed.
Service Status
According to the firm’s status page, most services are under maintenance or experiencing degraded performance, except for Adapt, eEmpACT, and StaffSuite, which remain operational. Major outages are affecting ATS/CRM, Automation, Back Office, Talent Platform, and sandbox environments. At the time of writing, degraded performance was reported for Bullhorn for Salesforce and associated products, Onboarding365, and additional solutions including Amplify, Analytics, Messaging, SourceBreaker, VMS Sync, Data Hub, Erecruit, SalesDuel, and VMS Access. Bullhorn has not provided any timelines for when these services will be restored.
User Actions Required
Additionally, the latest update mentions that all non-SSO users will be required to reset their passwords on their next login. As per the FAQ page, API passwords require rotation to protect integrations, while client-secret changes will follow later. For Bullhorn-hosted instances, this will take place automatically. Customers can request data exports through the firm’s support to minimize business disruption. Customers should check the company’s service status page for the latest updates.
For more details, you can read the complete article here.