Abnormal Security incident

Portal Access Disruption - US customers

Major Resolved View vendor source →

Abnormal Security experienced a major incident on November 6, 2025 affecting Portal Application, lasting 3h 34m. The incident has been resolved; the full update timeline is below.

Started
Nov 06, 2025, 08:46 PM UTC
Resolved
Nov 07, 2025, 12:20 AM UTC
Duration
3h 34m
Detected by Pingoru
Nov 06, 2025, 08:46 PM UTC

Affected components

Portal Application

Update timeline

  1. investigating Nov 06, 2025, 08:46 PM UTC

    Starting around 20:25 UTC (1:25pm PT), Abnormal began experiencing an issue with the Portal login functionality impacting US customers. Customers may experience issues accessing the Abnormal Portal. Email remediation and detection services remain fully operational and unimpacted. Engineers are actively investigating the root cause and working to restore full Portal access.

  2. identified Nov 06, 2025, 09:18 PM UTC

    Abnormal's engineering team has made progress resolving the Portal access issue. Some customers in the US region are now able to successfully log in to the Portal. Engineers continue working to fully restore Portal access for all customers. Email security protection, including threat detection and remediation, remains fully operational and unaffected. Updates will be provided as the situation progresses.

  3. monitoring Nov 06, 2025, 11:04 PM UTC

    Portal services have remained stable since 21:10 UTC, and all customer access has been fully restored. Abnormal's engineering team continues working to address some underlying issues to prevent recurrence. Email security protection, including threat detection and remediation, remains fully operational and unaffected. The next update will be provided when this issue is fully resolved.

  4. resolved Nov 07, 2025, 12:20 AM UTC

    Abnormal's engineering team has fully resolved the Portal access issue. All customers can now successfully log in to the Portal, and services are operating normally. Email security protection remained fully operational throughout this incident. No further updates will be provided for this issue. If customers experience any further issues, please reach out to [email protected].