Skip to content
NewA calmer, faster ZeroHour
StoryData breachhigh

Bullhorn keeps staffing platform partly degraded after cyber incident

2 sources · 2 articlesFirst reported Updated ()1
What's new

October 20: The Register reported partial restoration in the UK, US and Australia, remaining product degradation, and that Bullhorn has not named attackers or confirmed ransomware.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

Bullhorn has restored some regional access after a cyber incident, but several products remain degraded and data theft is unconfirmed.

Staffing software company Bullhorn, which says it serves more than 10,000 customers, disabled access to its cloud platform after detecting a cyber incident. Problems began Friday, October 16, with job postings to Indeed and became a system-wide outage the next morning. Bullhorn says it isolated the issue, removed the immediate threat and is restoring services with CrowdStrike. As of Tuesday, services were back in the UK, US and Australia, but SSO, password resets, customizations and several products remained degraded. A forensic investigation has not determined whether customer data was stolen; Bullhorn has not named the attackers or said whether ransomware was involved.

Key facts
  • More than 10,000 customers worldwide; agencies lost candidate, placement and some payroll access.
  • Non-SSO users must reset passwords; API passwords must be rotated, with client-secret changes later.
  • Adapt, eEmpACT and StaffSuite remained operational, according to BleepingComputer.
  • Bullhorn says staff will never ask for passwords, MFA codes or verification tokens.
  • It will contact customers if the investigation finds their data was compromised.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Timeline

dated events in the reporting · oldest first
  1. Oct 16, 2026Job-posting problems to Indeed begin · The Register
  2. Oct 17, 2026Problems become a system-wide platform outage · The Register
  3. Oct 20, 2026UK, US and Australia services return, some products degraded · The Register

What each outlet adds

beyond the shared facts
  • BleepingComputerLists major outages, still-operational products, and support data exports.
  • The RegisterDates the onset, regional restoration, and unanswered ransomware questions.
Vendors
Bullhorn
Products
Bullhorn Platform
Victims
Bullhorn
Organizations
CrowdStrike
Countries
United StatesUnited KingdomAustralia

Coverage

oldest first · one row per article · UTC
  1. · 6d ago BleepingComputerFirst report

    Bullhorn takes staffing platform offline after cyberattack

    Forensics has not determined whether customer data was stolen, and Bullhorn has given no restoration date.

  2. · 5d ago The Register · Security

    Bullhorn takes recruitment platform offline after a cyberattack

    Services are back in the UK, US and Australia, but SSO, password resets and several products were still degraded as of Tuesday.