Kallidus incident

360 and Talent Maintenance

Minor Resolved View vendor source →

Kallidus experienced a minor incident on October 23, 2025, lasting 7d 5h. The incident has been resolved; the full update timeline is below.

Started
Oct 23, 2025, 08:27 AM UTC
Resolved
Oct 30, 2025, 01:37 PM UTC
Duration
7d 5h
Detected by Pingoru
Oct 23, 2025, 08:27 AM UTC

Update timeline

  1. postmortem Oct 30, 2025, 01:37 PM UTC

    Between 09:17 and 20:30 GMT on 23-10-2025 our Talent and 360 applications experienced a period of downtime while we investigated and addressed a newly discovered security vulnerability. Root Cause: We identified an exploitable vulnerability in one of our application components. A thorough investigation indicated that no customer data was accessed, exposed or compromised via this method. Upon discovery we immediately took the system offline to prevent any potential further risk and subsequently conducted a full investigation to identify the root issue and to confirm no data exposure. A permanent security patch was applied to the application code to close the vulnerability. Talent and 360 service was safely restored once we confirmed system integrity and security. As a precaution, we are enhancing internal security scanning and code review processes and expanding our automated vulnerability detection and response capabilities. Thank you for your patience while we resolved this issue.