Bullhorn takes recruitment platform offline after a cyberattack
Original title: Bullhorn sees red after cyberattack knocks recruitment platform offline
Services are back in the UK, US and Australia, but SSO, password resets and several products were still degraded as of Tuesday.
Bullhorn, which says it serves more than 10,000 customers, detected a cyber incident on its platform and disabled access to contain it, bringing in CrowdStrike. Problems began on Friday, October 16, with job postings to Indeed, and became a full outage the next morning. By Tuesday some users still had trouble with single sign-on, password resets and customizations, and automation tools, Talent Platform, Onboarding365 and Time & Expense showed degraded performance. A forensic investigation has not determined whether customer data was stolen; non-SSO users must reset passwords and API customers must rotate credentials.
Unconfirmed: Whether attackers stole data, who they were, and whether ransomware was used remain unconfirmed.
- Bullhorn has not named the attackers or said whether ransomware was involved.
- The company says staff will never ask for passwords, MFA codes or verification tokens.
- It will contact customers if the investigation finds their data was compromised.
- Agencies lost access to candidate records, applications, placements and some payroll systems.
- The Register said Bullhorn did not answer its questions by publication time.
Impact: Platform intrusion; customer data theft not yet determined
| Product | Affected |
|---|---|
| Bullhorn Platform | — |
- 1.Reset passwords for users who do not sign in through SSO.
- 2.Rotate credentials used by API integrations.
- 3.Do not disclose passwords, MFA codes or verification tokens to anyone claiming to be Bullhorn.
- Products
- Bullhorn Platform
- Victims
- Bullhorn
- Organizations
- CrowdStrike
- Countries
- United StatesUnited KingdomAustralia
From the original article
2 min read at theregister.comStaffing software giant calls in CrowdStrike as customers face login headaches and questions remain over possible data theft
By Carly Page · theregister.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.