OneTrust incident

IM-1733 - Multiple OneTrust Modules - Service Outage

Resolved after 22 minutes, on October 23, 2026.

resolved Oct 23, 2026, 01:33 PM UTC

We identified a service interruption affecting multiple OneTrust modules within the APP environment between 14:08 UTC and 14:35 UTC on 23 October 2026 . During this period, customers may have experienced intermittent connectivity and temporary difficulties accessing the platform or performing actions within affected modules. Assessment Automation: Customers may have experienced degraded performance or temporary inability to access Assessment Automation and associated APIs. Awareness Training: Customers may have been unable to access courses, complete training, or perform new enrolments. Cookie Consent: Customers may have been unable to add new sites for scanning, view scan progress, manage cookies or services, publish domains, or perform actions on templates and frameworks. Consent Management: Customers may have experienced failures creating Preference Centres, requesting authentication tokens, checking recent receipt transactions, or using affected Consent APIs. Core Services: Customers may have experienced temporary difficulty accessing the environment, alongside potential gateway failures, notification delays or failures, missing translations, scheduled-event disruption, or failed document exports, uploads, and downloads. Data Discovery: Customers may have been unable to initiate new scans, while existing scan ingestion, term/tag assignments, and Policy and Automation Rules may have been affected. Data Mapping: Customers may have been unable to access or update inventory items, submit inventory-related assessments, or complete ongoing bulk imports. Privacy Rights Automation (DSAR): Customers may have experienced failures or delays submitting requests, creating submitted requests, or accessing Data Subject Portal and webform functionality. Governance, Risk and Compliance (GRC): Customers may have experienced failures accessing the Risk Register or Controls, or creating and updating risks. Preference Centre: Customers may have been temporarily unable to load their Preference Centre portal. Incident & Breach: Customers may have experienced failures accessing linked incidents, completing incident-type assessments, running related Automation Rules, or logging into Incident Management. Integrations: Customers may have experienced delays processing events or errors when calling Webhook APIs. Login / Access Management: Customers may have experienced login failures or API calls failing to validate credentials. Policy & Notice Management: Customers may have experienced disruption across Policy Management administration pages, privacy-notice location tracking, and private share links. Reporting / Insights & Dashboards: Customers may have been unable to access reports or dashboards, experienced failures exporting scheduled reports, or seen delays in data being reflected in reports and dashboards. Third-Party Risk Management (VRM): Customers may have been unable to access Vendor, Engagement, and Contract screens, use associated APIs and automation/workflow rules, or respond to and approve related assessments. Corrective actions were deployed, and we confirmed that the customer impact was mitigated. This incident is resolved. If you have any questions or need further assistance, please create a support case by visiting the Get Help section of my.onetrust.com, quoting incident reference IM-1733 .

Started
Oct 23, 2026, 01:11 PM UTC
Resolved
Oct 23, 2026, 01:33 PM UTC
Duration
22m
Detected by Pingoru
Oct 23, 2026, 01:11 PM UTC

Update timeline

  1. resolved Oct 23, 2026, 01:33 PM UTC

    We identified a service interruption affecting multiple OneTrust modules within the APP environment between 14:08 UTC and 14:35 UTC on 23 October 2026 . During this period, customers may have experienced intermittent connectivity and temporary difficulties accessing the platform or performing actions within affected modules. Assessment Automation: Customers may have experienced degraded performance or temporary inability to access Assessment Automation and associated APIs. Awareness Training: Customers may have been unable to access courses, complete training, or perform new enrolments. Cookie Consent: Customers may have been unable to add new sites for scanning, view scan progress, manage cookies or services, publish domains, or perform actions on templates and frameworks. Consent Management: Customers may have experienced failures creating Preference Centres, requesting authentication tokens, checking recent receipt transactions, or using affected Consent APIs. Core Services: Customers may have experienced temporary difficulty accessing the environment, alongside potential gateway failures, notification delays or failures, missing translations, scheduled-event disruption, or failed document exports, uploads, and downloads. Data Discovery: Customers may have been unable to initiate new scans, while existing scan ingestion, term/tag assignments, and Policy and Automation Rules may have been affected. Data Mapping: Customers may have been unable to access or update inventory items, submit inventory-related assessments, or complete ongoing bulk imports. Privacy Rights Automation (DSAR): Customers may have experienced failures or delays submitting requests, creating submitted requests, or accessing Data Subject Portal and webform functionality. Governance, Risk and Compliance (GRC): Customers may have experienced failures accessing the Risk Register or Controls, or creating and updating risks. Preference Centre: Customers may have been temporarily unable to load their Preference Centre portal. Incident & Breach: Customers may have experienced failures accessing linked incidents, completing incident-type assessments, running related Automation Rules, or logging into Incident Management. Integrations: Customers may have experienced delays processing events or errors when calling Webhook APIs. Login / Access Management: Customers may have experienced login failures or API calls failing to validate credentials. Policy & Notice Management: Customers may have experienced disruption across Policy Management administration pages, privacy-notice location tracking, and private share links. Reporting / Insights & Dashboards: Customers may have been unable to access reports or dashboards, experienced failures exporting scheduled reports, or seen delays in data being reflected in reports and dashboards. Third-Party Risk Management (VRM): Customers may have been unable to access Vendor, Engagement, and Contract screens, use associated APIs and automation/workflow rules, or respond to and approve related assessments. Corrective actions were deployed, and we confirmed that the customer impact was mitigated. This incident is resolved. If you have any questions or need further assistance, please create a support case by visiting the Get Help section of my.onetrust.com, quoting incident reference IM-1733 .

Your product runs on more than OneTrust

Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.

Add your stack →