BrandShelter incident
Un-requested Password Reset Emails - BrandShelter Portal
BrandShelter experienced a notice incident on July 12, 2024, lasting 12h 11m. The incident has been resolved; the full update timeline is below.
Update timeline
- investigating Jul 12, 2024, 12:45 AM UTC
It has come to our attention that our system may have sent out password reset requests to many clients & users of our platform - we can confirm that the platform has encountered an error which caused this & at no point do we believe the platform or accounts have been compromised. We will update this status as soon as we can confirm a fix has been deployed to prevent such unintentional system messaging / password resets in future. The next update will be provided by 03:00AM UTC. We apologise for any inconvenience caused during this time.
- investigating Jul 12, 2024, 02:41 AM UTC
The Platform Team are continuing to investigate the situation however as an interim measure, they have now disabled the Password Reset function whilst the investigation continues. The next update will be provided by 05:00AM UTC We apologise for any inconvenience caused during this time.
- investigating Jul 12, 2024, 05:18 AM UTC
The Platform Team are continuing to investigate the root cause of the issue. The Password Reset functionality will remain disabled until such a time the team can identify and resolve the issue. The next update will be provided at 07:00AM UTC We apologise for any inconvenience caused during this time.
- investigating Jul 12, 2024, 07:02 AM UTC
The Platform Team are continuing the investigation at this time. The Password Reset functionality remains disabled until further notice. The next update will be provided at 09:00AM UTC. We apologise for any inconvenience caused during this time and thank you for your patience and understanding.
- investigating Jul 12, 2024, 09:09 AM UTC
The investigation is still ongoing. While the cause of the issue is yet to be determined, we can confirm that no data was compromised or exposed. We appreciate your patience and will update the status post when more information is available
- investigating Jul 12, 2024, 12:55 PM UTC
We are continuing to investigate this issue.
- resolved Jul 12, 2024, 12:56 PM UTC
Our investigations identified an error in the platform which caused the issue. The issue has been fixed and the Password Reset functionality is now fully restored after being temporarily disabled as a precaution. Please note, it is not mandatory for users to reset their current passwords as there was no data breach. We can confirm that the platform, accounts, or data have not been compromised as a result of this issue.