Abnormal Security Outage History

Between 20:04 UTC and 20:45 UTC, US customers experienced issues with the Abnormal Portal which caused difficulties loading and navigating the platform. During this time, some users may have encountered errors or delays when accessing portal features. Email detection and remediation services remained fully operational throughout this incident. Portal functionality has been restored and services are now available. If you experience any further issues pertaining to this incident, please contact us at [email protected].

As of 12:40 UTC, Abnormal has implemented a fix and engineers are observing Security Orchestration, Automation Response traffic as expected. The service disruption affecting automated security workflows and response actions has been fully resolved. Please reach out to [email protected] if you experience any further issues.

Abnormal's engineering team has fully resolved the Portal access issue. All customers can now successfully log in to the Portal, and services are operating normally. Email security protection remained fully operational throughout this incident. No further updates will be provided for this issue. If customers experience any further issues, please reach out to [email protected].

Abnormal's email security services and portal access have been fully restored as of 16:35 UTC. Our engineering team is currently processing the backlog of messages from the affected timeframe, which is expected to complete within the next hour. If you experience any further issues, please reach out to [email protected].

Abnormal has successfully resolved the portal access issue that was affecting customers in Europe as of 21:30 UTC. Full portal functionality has been restored for all affected customers. Abnormal apologizes for any inconvenience this may have caused. If you continue to experience any issues accessing the portal, please contact support at [email protected].

Engineers identified and resolved a configuration issue that was preventing detection and remediation services from functioning properly for FedRamp customers. All services have been fully restored, and engineering teams are performing a replay of all impacted messages from the incident window to ensure complete threat detection and remediation coverage.

Portal access has been fully restored for all US customers as of 07:30 pm PT on September 12, 2025. Detection and remediation services were not impacted as part of this issue, and email protection continued to operate normally throughout the incident. If customers experience any further issues with portal access, please reach out to support at [email protected].

All impacted mailboxes have been fully recovered and email protection services are now fully functional. If customers experience any issues with mailbox protection services, please contact support at [email protected].

As of 00:17 UTC on August 22nd, Abnormal's engineering team has fully resolved the login issues affecting customers in our Federal Risk and Authorization Management Program environment. All customers should now be able to access the Abnormal Security Portal normally. Email detection and remediation services remained fully operational throughout this incident. Abnormal apologizes for any inconvenience this issue may have caused. If you experience any further issues related to portal logins, please reach out to [email protected]

On 2025-08-18 at 16:50 UTC, Abnormal experienced a degradation of the Abnormal Portal where some customers experienced intermittent access issues and slow response times on the threat log and search and response features. The issue has been fully resolved as of 17:50 UTC, and all portal functionality is now operating normally. There was no impact on email remediation during this incident. Abnormal apologizes for any inconvenience this issue caused customers. If you continue to experience any portal access issues, please contact Abnormal Support at [email protected].

This incident has been fully resolved. As of 21:13 UTC, Abnormal has completed reprocessing all emails from the impacted timeframe for European customers using Inbound Email Security. All affected emails have now been properly analyzed and protected. Abnormal's services are fully operational. If you experience any issues, please contact support at [email protected].

Search and Respond services have been fully restored as of 19:29 UTC for all customers. Abnormal's engineering team is now performing a backfill process for quarantine messages and related data that may have been impacted during the service disruption. This backfill process is expected to complete within the next few hours and will ensure all information is properly processed and available. This incident has been resolved and no further updates will be provided.

Message reprocessing for impacted customers completed at 05:00 UTC. This issue is fully resolved. Thank you for your patience while Microsoft worked to resolve their issues. If you experience any further issues, please reach out to customer support at [email protected]

Abnormal's email security services have fully recovered following the Google service disruption. The backlog of messages that accumulated during the impact window between 17:50 UTC and 18:50 UTC has been successfully reprocessed. All Inbound Email Security, AI Security Mailbox, and Graymail services for Google Workspace customers are now functioning normally. If you experience any further issues or have questions or concerns, please reach out to our support team at [email protected]

As of 00:53 UTC, our engineering team has successfully resolved the issue impacting Inbound Email Security and Email Productivity in the EU. Emails affected during the incident window have been reprocessed and remediated. If you experience any further issues, please reach out to our support team at [email protected]

As of 20:25 UTC, the backlog of messages from the incident has been fully processed. Message remediation for Inbound Email Security impacting EU customers has fully recovered, and the issue is now resolved. If you experience any further issues, please don’t hesitate to reach out to our customer support team at [email protected]. We appreciate your patience throughout this incident.

Between 20:45 UTC and 21:05 UTC, some US customers may have experienced issues logging into the Abnormal Portal and slowness when navigating the platform. Our engineering team quickly identified and addressed the issue, and normal service has now been restored. We sincerely appreciate your patience while we worked to resolve this disruption. If you continue to experience any issues or need further assistance, please reach out to our support team at [email protected].

Abnormal services have fully recovered from the Microsoft outage, and the backlog of messages from the incident duration has been successfully processed. We appreciate your patience as Microsoft worked to restore its services. If you have any questions or continue to experience issues, please reach out to our support team at [email protected].

The Microsoft service disruption that began at 20:50 UTC (12:50 PM PST) has been fully resolved as of 21:45 UTC (1:45 PM PST). Abnormal Security’s email remediation processing times have stabilized and are now operating at normal levels. Engineers are reprocessing messages that were impacted during the incident duration. Throughout the incident, all other Abnormal Security services, including the Portal, remained fully operational. Only email remediation latency was impacted. If you experience any further issues pertaining to this incident, please contact us at [email protected].

On January 9, 2025, between 09:00 UTC and 16:15 UTC, Abnormal's URL Wrapping feature was unintentionally enabled. This feature is part of ongoing efforts to improve detection efficacy against malicious links. The incident impacted a limited subset of suspicious email messages (Less than 0.1% of total messages processed). We have identified and reverted all impacted messages. There was no disruption to customer business operations or detection efficacy during this time, and employee access to links remained unaffected.

Between 14:30 UTC and 17:00 UTC on January 7th, customers experienced empty Account TakeOver (ATO) list views due to a UI-only issue. Detections remained fully operational and were not impacted. A recent deployment was rolled back, and functionality was restored. For any further questions, please reach out to [email protected]

Microsoft services have remained stable. Processing for Inbound Email Security, AI Security Mailbox, and Graymail have remained at baseline levels since 22:45 UTC. A postmortem report will be available to share with customers once Microsoft has provided us with details pertaining to this incident. This incident is resolved and no further updates will be provided. If you experience any further issues pertaining to this incident, please contact us at [email protected].

Between 16:34 UTC and 21:51 UTC on November 5th, 2024, email Remediation for Inbound Email Security customers in North America was impacted. Email remediation has recovered and is now processing in real time. If you experience any further issues pertaining to this incident, please contact us at [email protected].

Between 19:10 and 20:57 UTC on October 7th, Abnormal experienced delayed processing of attack remediation which impacted all US data center customers. Graymail was not impacted as part of this incident. The emails not analyzed during the incident time have been fully processed and services have been recovered as of 20:57 UTC. If you experience any further issues pertaining to this incident, please contact us at [email protected].