Box incident

[Medium] Issue with Multiple Box Services

Major Resolved View vendor source →

Box experienced a major incident on June 11, 2026 affecting Login/SSO and Authentication (OAuth 2.0 / JWT) and 1 more component, lasting 1h 26m. The incident has been resolved; the full update timeline is below.

Started
Jun 11, 2026, 12:34 AM UTC
Resolved
Jun 11, 2026, 02:01 AM UTC
Duration
1h 26m
Detected by Pingoru
Jun 11, 2026, 12:34 AM UTC

Affected components

Login/SSOAuthentication (OAuth 2.0 / JWT)Box Edit / ToolsBox Sign

Update timeline

  1. identified Jun 11, 2026, 12:34 AM UTC

    Our team is investigating an issue with Box API authentication and has identified the underlying cause of this issue and is working to take remediating steps. We will provide additional updates as they become available.

  2. monitoring Jun 11, 2026, 01:41 AM UTC

    Our team has taken steps to remediate this issue and is seeing improvement. We are continuing to monitor for any additional impact.

  3. resolved Jun 11, 2026, 02:01 AM UTC

    After further monitoring, this incident is now considered resolved. The affected services have been restored to full functionality. If you continue to experience any issues, please contact Box Support at https://support.box.com.

  4. postmortem Jun 24, 2026, 10:02 PM UTC

    _Notice and disclaimer: Box is providing this preliminary information subject to further review and analysis. To the best of our knowledge, this is the current state and we may update as more information is confirmed._ ‌ On June 10, 2026 between 5:10 pm PDT and 6:40 pm PDT, some users may have experienced difficulties while working in Box. During this time, Box customers may have been unable to refresh or request a new Access Token leading to degradation in Public API request processing. The issue was caused by a change to our authentication and authorization infrastructure that resulted in elevated errors and service instability. We restored the failing component by scaling and stabilizing the authentication infrastructure; customer impact ceased and metrics returned to normal by 6:40 PM PDT. In addition, we are reviewing our deployment and monitoring processes to prevent similar issues from occurring in the future. ‌ We are conducting a full engineering postmortem and our overview is subject to change with further analysis and findings. In the event our continuing investigation yields further substantive findings, we may publish additional analysis after the conclusion of the full engineering postmortem. We are continuously working to improve Box and want to make sure we are delivering the best product and user experience we can. We hope we have provided some clarity here and we would be happy to answer any questions you may still have regarding this matter. Sincerely, The Box Team