Proofpoint Security Awareness Training incident
Report Suspicious - Disconnect from Threat Intelligence
Proofpoint Security Awareness Training experienced a major incident on August 11, 2026 affecting PhishAlarm - CLEAR - U.S. and PhishAlarm - CLEAR - Europe and 1 more component, lasting 10d 5h. The incident has been resolved; the full update timeline is below.
Affected components
Update timeline
- investigating Aug 11, 2026, 04:11 PM UTC
Customers in the US using Cloud Threat Response are currently failing to connect to threat intelligence for review. Admins will see missing results in the Analyzer report and will not receive TROs during this time. The team is actively investigating this issue.
- monitoring Aug 11, 2026, 06:34 PM UTC
A fix has been implemented and we are monitoring the results.
- monitoring Aug 12, 2026, 05:03 PM UTC
We've confirmed missing TROs and missing events from reports are isolated to US customers using CTR All emails were reported to CTR successfully and actioned as configured All new reported emails are generating a TRO and showing in the report We are currently working on getting the backlog processed from Aug 8 to the 11th and will update once we have an ETA
- monitoring Aug 20, 2026, 10:44 PM UTC
We're reprocessing messages that were previously missed due to the connection failure. Customers using CTR may notice an influx of TRO emails.
- resolved Aug 21, 2026, 09:44 PM UTC
This incident was resolved at 8:00 am Eastern