ThreatLocker experienced a notice incident on November 19, 2025 affecting API [Instance A] and Portal [Instance A] and 1 more component, lasting 1d 18h. The incident has been resolved; the full update timeline is below.
Affected components
Update timeline
- investigating Nov 19, 2025, 01:36 PM UTC
We are currently aware of issues logging into the portal and we are investigating
- investigating Nov 19, 2025, 02:40 PM UTC
We are continuing to investigate this issue.
- identified Nov 19, 2025, 02:40 PM UTC
We have identified the issue and are bringing the instances and APIs back online
- monitoring Nov 19, 2025, 04:53 PM UTC
We've isolated a large number of connections and slowly introducing everyone back online. Currently 50% of our customers are back online. If you want to be prioritized, please reach out to a CyberHero.
- monitoring Nov 19, 2025, 06:01 PM UTC
We are continuing to make progress and working on identified issues.
- monitoring Nov 19, 2025, 06:29 PM UTC
We are continuing to make progress. Majority of the Instances are fully operational.
- monitoring Nov 19, 2025, 07:31 PM UTC
All systems are fully operational at this time. We are continuing to monitor.
- monitoring Nov 20, 2025, 11:40 AM UTC
We are continuing to monitor for any further issues.
- monitoring Nov 20, 2025, 03:48 PM UTC
All systems are fully operational at this time. We are continuing to monitor.
- monitoring Nov 21, 2025, 03:04 AM UTC
We are continuing to monitor for any further issues.
- resolved Nov 21, 2025, 03:11 PM UTC
All systems are fully operational at this time