Hoxhunt incident
Issue with formatting of Hoxhunt Report emails of reported threats via Gmail
Hoxhunt experienced a major incident on October 27, 2025 affecting Hoxhunt Google add-on and Hoxhunt Response, lasting 1d 19h. The incident has been resolved; the full update timeline is below.
Affected components
Update timeline
- investigating Oct 27, 2025, 12:36 PM UTC
We are currently investigating an issue with the formatting of Hoxhunt Report emails of reported threats via Gmail. When a user reports a real threat (not a Hoxhunt simulation) via the Hoxhunt button in Gmail, a Hoxhunt Report email is created. The formatting of this email depends on the Threat Forwarding Forward settings in the Hoxhunt Admin portal. Currently it has been confirmed that when the setting "Reported email included as an attachment" is active, this setting is not honored and the reported email is instead visible in the body. We will continue to investigate the cause of the issue. When identified we will inform you.
- identified Oct 27, 2025, 01:53 PM UTC
We have identified the possible cause of this issue. A fix for this issue will be released tomorrow morning (Eastern European Time).
- identified Oct 27, 2025, 04:29 PM UTC
We are currently preparing to release a fix as soon as possible. We will be closely monitoring the situation and the propagation of the fix. We sincerely apologize for the inconvenience this incident has caused for our Google Workspace customers. Hoxhunt Support
- monitoring Oct 27, 2025, 05:02 PM UTC
We have released a fix for the issue which caused threat forward emails to miss the reported emails as attachments (when configured by customers). We are closely monitoring the situation and the propagation of the fix. We sincerely apologize for the inconvenience this incident has caused for our Google Workspace customers. - Hoxhunt Support
- resolved Oct 29, 2025, 08:35 AM UTC
The fix released on the 27th of October fixed the issue. We are Resolving this incident.