Bullhorn Takes Staffing Platform Offline After Cyberattack
Summary
Bullhorn disabled access to its platform to contain a cyberattack that caused a system-wide outage. The company is investigating; it has not determined whether customer data was exfiltrated.
Key points
- Bullhorn confirmed that a cyberattack caused a system-wide outage and temporarily disabled platform access to contain the activity.
- The company says it isolated the issue and eradicated the immediate threat; services are undergoing security reviews before restoration.
- Major outages or degraded performance affect multiple Bullhorn services, while Adapt, eEmpACT, and StaffSuite remain operational.
- Bullhorn has not determined whether customer data was exfiltrated and says it will notify affected individuals if a breach is confirmed.
- Non-SSO users must reset passwords at their next login; API passwords require rotation, and client secrets will be changed later.
- Bullhorn has not provided a restoration timeline. Customers can request data exports, and unposted time records will be reprocessed after restoration.
Article Details
- Victim Organization
- Bullhorn
- Incident Type
- Cyberattack that caused a system-wide outage; Bullhorn temporarily disabled access to contain the activity.
- Operational Impact
- Bullhorn disabled platform access. Major outages affected ATS/CRM, Automation, Back Office, Talent Platform, and sandbox environments; other services had degraded performance. Some services remained operational. Unposted time records were to be reprocessed after restoration.
- Claim Status
- confirmed