Vanta incident
Incorrect security-training and background-check test results
Resolved after 8 days 20 hours, on October 20, 2026.
We fixed an issue that caused some security-training and background-check tests to omit records from third-party integrations. Completed training or background checks could therefore appear missing in Vanta. The issue affected a subset of tests covering general security awareness, HIPAA, GDPR, secure coding, CCPA, PCI, social engineering, AI risk, insider threats, and background checks. For most affected domains, we invalidated history from October 20, 2026, at 21:38:30 UTC through October 29, 2026, at 18:00 UTC. Earlier affected windows for a small subset of domains began September 22 at 17:57 UTC for HIPAA training, September 23 at 17:04 UTC for GDPR and secure-code training, and September 28 at 22:51 UTC for general security training. These earlier windows also end October 29 at 18:00 UTC. We deployed the fix on October 29, reran the affected tests, and completed invalidation on October 30. Affected periods appear on the relevant tests’ History tabs. If you have questions about your test history or audit, contact [email protected].
Update timeline
- resolved Oct 29, 2026, 06:00 PM UTC
We fixed an issue that caused some security-training and background-check tests to omit records from third-party integrations. Completed training or background checks could therefore appear missing in Vanta. The issue affected a subset of tests covering general security awareness, HIPAA, GDPR, secure coding, CCPA, PCI, social engineering, AI risk, insider threats, and background checks. For most affected domains, we invalidated history from October 20, 2026, at 21:38:30 UTC through October 29, 2026, at 18:00 UTC. Earlier affected windows for a small subset of domains began September 22 at 17:57 UTC for HIPAA training, September 23 at 17:04 UTC for GDPR and secure-code training, and September 28 at 22:51 UTC for general security training. These earlier windows also end October 29 at 18:00 UTC. We deployed the fix on October 29, reran the affected tests, and completed invalidation on October 30. Affected periods appear on the relevant tests’ History tabs. If you have questions about your test history or audit, contact [email protected].
Your product runs on more than Vanta
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services