BambooHR incident

BambooHR Temporarily Unavailable: Security Precaution

Critical Ongoing View vendor source →

BambooHR is currently experiencing a critical incident affecting app.bamboohr.com (US) and app.bamboohr.com (US) (app.bamboohr.com (US) — us-east-2 Datacenter) and 1 more component, which began 3h ago. The vendor's full update timeline is below.

Started
Oct 21, 2026, 10:46 AM UTC
Resolved
Ongoing
Duration
● 3h 15m
Detected by Pingoru
Oct 21, 2026, 10:46 AM UTC

Affected components

app.bamboohr.com (US)app.bamboohr.com (US) (app.bamboohr.com (US) — us-east-2 Datacenter)app.bamboohr.com (Canada)app.bamboohr.com (Canada) (app.bamboohr.com (Canada) — ca-central-1 Datacenter)app.bamboohr.com (Ireland)app.bamboohr.com (Ireland) (app.bamboohr.com (Ireland) — eu-west-1 Datacenter)www.bamboohr.comwww.bamboohr.com (www.bamboohr.com — us-east-1 Datacenter)

Update timeline

  1. monitoring Oct 21, 2026, 10:46 AM UTC

    We’re aware of PHP2SHELL, a security vulnerability affecting widely used web software, including software used by BambooHR. Our teams are closely monitoring our systems and taking protective measures. If needed, we will temporarily take BambooHR offline as a precaution to protect customer data. We’ll share updates here.

  2. monitoring Oct 21, 2026, 11:51 AM UTC

    We are temporarily taking BambooHR offline as a precaution in response to PHP2SHELL, a critical security vulnerability affecting widely used web software across many organizations. The security of your data is our top priority. Our Engineering and Security teams have been monitoring our systems throughout the night and are working to address the vulnerability and restore access safely. We know this interrupts essential work, including payroll, and we’re sorry for the disruption. We do not yet have a confirmed restoration time. We will continue sharing updates here.