Resolved after 2 days 14 hours, affecting SL1 and Talent Platform - US Prod and 1 more, on October 18, 2026.
[07:40 AM EST 10/20/2026] As we continue our response to the Bullhorn Platform security incident, please be vigilant against potential social engineering attacks. Threat actors may pose as Bullhorn personnel via email, text, or phone calls, using the incident as a pretext to request credentials or sensitive information. Please note that Bullhorn will never ask you to share your password, Multi-Factor Authentication (MFA) codes, or verification tokens via email, telephone, text, or any other channel. Service has been restored and we are continuing to monitor. Please find the FAQ here.
Affected components
Update timeline
- investigating Oct 18, 2026, 03:14 AM UTC
As a precautionary measure, access to Bullhorn Time & Expense and Bullhorn Talent Platform is temporarily disabled while we continue to investigate the cyber incident we shared earlier today. Thank you for your continued patience as we work to resolve this as quickly as we can. We will post further updates here as they become available.
- investigating Oct 18, 2026, 03:02 PM UTC
Please refer to Bullhorn ATS/CRM services disruption for ongoing updates. https://status.bullhorn.com/incidents/6ylmf0t08t5j
- investigating Oct 19, 2026, 01:36 PM UTC
We are continuing to investigate this issue.
- investigating Oct 19, 2026, 06:16 PM UTC
[2:20 PM EST 10/19/2026]As we continue our response to the Bullhorn Platform security incident, please be vigilant against potential social engineering attacks. Threat actors may pose as Bullhorn personnel via email, text, or phone calls, using the incident as a pretext to request credentials or sensitive information. Please note that Bullhorn will never ask you to share your password, Multi-Factor Authentication (MFA) codes, or verification tokens via email, telephone, text, or any other channel. We are actively working to bring Talent Platform back online securely and have revised system availability for Global Talent Platform to 3pm EST. Please find the FAQ here.
- investigating Oct 19, 2026, 06:21 PM UTC
[2:21 PM EST 10/19/2026] As we continue our response to the Bullhorn Platform security incident, please be vigilant against potential social engineering attacks. Threat actors may pose as Bullhorn personnel via email, text, or phone calls, using the incident as a pretext to request credentials or sensitive information. Please note that Bullhorn will never ask you to share your password, Multi-Factor Authentication (MFA) codes, or verification tokens via email, telephone, text, or any other channel. We are actively working to bring Talent Platform back online securely and have revised system availability for Global Talent Platform to 3pm EST. Please find the FAQ here.
- investigating Oct 19, 2026, 07:01 PM UTC
We are continuing to investigate this issue.
- investigating Oct 19, 2026, 09:55 PM UTC
[6:00 PM EST 10/19/2026] As we continue our response to the Bullhorn Platform security incident, please be vigilant against potential social engineering attacks. Threat actors may pose as Bullhorn personnel via email, text, or phone calls, using the incident as a pretext to request credentials or sensitive information. Please note that Bullhorn will never ask you to share your password, Multi-Factor Authentication (MFA) codes, or verification tokens via email, telephone, text, or any other channel. We have been working to restore service safely and securely for Global Talent Platform. Service has been restored and will be monitored. Please find the FAQ here.
- investigating Oct 20, 2026, 07:11 AM UTC
[3:00 AM EST 10/20/2026] As we continue our response to the Bullhorn Platform security incident, please be vigilant against potential social engineering attacks. Threat actors may pose as Bullhorn personnel via email, text, or phone calls, using the incident as a pretext to request credentials or sensitive information. Please note that Bullhorn will never ask you to share your password, Multi-Factor Authentication (MFA) codes, or verification tokens via email, telephone, text, or any other channel. Service has been restored and we are continuing to monitor. Please find the FAQ here.
- investigating Oct 20, 2026, 09:55 AM UTC
[6:00 AM EST 10/20/2026] As we continue our response to the Bullhorn Platform security incident, please be vigilant against potential social engineering attacks. Threat actors may pose as Bullhorn personnel via email, text, or phone calls, using the incident as a pretext to request credentials or sensitive information. Please note that Bullhorn will never ask you to share your password, Multi-Factor Authentication (MFA) codes, or verification tokens via email, telephone, text, or any other channel. Service has been restored and we are continuing to monitor. Please find the FAQ here.
- monitoring Oct 20, 2026, 11:42 AM UTC
[07:40 AM EST 10/20/2026] As we continue our response to the Bullhorn Platform security incident, please be vigilant against potential social engineering attacks. Threat actors may pose as Bullhorn personnel via email, text, or phone calls, using the incident as a pretext to request credentials or sensitive information. Please note that Bullhorn will never ask you to share your password, Multi-Factor Authentication (MFA) codes, or verification tokens via email, telephone, text, or any other channel. Service has been restored and we are continuing to monitor. Please find the FAQ here.
Your product runs on more than Bullhorn
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services