Bullhorn takes staffing platform offline after cyberattack
Original title: Bullhorn takes staffing platform offline to contain cyberattack
Forensics has not determined whether customer data was stolen, and Bullhorn has given no restoration date.
Staffing software company Bullhorn disabled access to its cloud platform after detecting a cyber incident that followed job-posting problems on Friday and a system-wide outage the next day. The company says it isolated the issue and removed the immediate threat, and is restoring services with CrowdStrike specialists. It serves more than 10,000 customers worldwide. ATS/CRM, Automation, Back Office, Talent Platform and sandbox environments are among the major outages, while Adapt, eEmpACT and StaffSuite remain operational.
Unconfirmed: Whether attackers exfiltrated customer data is still under forensic investigation.
- Bullhorn says it has not yet determined whether customer data was exfiltrated.
- Non-SSO users must reset passwords at the next login.
- API passwords must be rotated; client-secret changes will follow later.
- Customers can request data exports through support while services are down.
Impact: Platform outage; customer data theft not yet confirmed
- 1.Non-SSO users must reset passwords on the next login.
- 2.Rotate API passwords; client-secret changes will follow.
- 3.Check Bullhorn’s service status page for restoration updates.
- Vendors
- Bullhorn
- Victims
- Bullhorn
- Organizations
- CrowdStrike
From the original article
2 min read at bleepingcomputer.com
Staffing software company Bullhorn has disabled access to its platform to contain a cyberattack that caused a system-wide outage. [...]
By Bill Toulas · bleepingcomputer.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.