WatchGuard incident
2026-03-04 - AMER - ThreatSync and MDR Ingestion Delay
WatchGuard experienced a minor incident on March 4, 2026 affecting Incident Persistence:::AMER, lasting 12h 29m. The incident has been resolved; the full update timeline is below.
Affected components
Update timeline
- investigating Mar 04, 2026, 05:53 PM UTC
We are experiencing an issue causing delays in ThreatSync ingestion, which is also impacting MDR ingestion. MDR relies on ThreatSync for the following data sources: - Firebox - AuthPoint - NDR We'll post our next update within an hour.
- identified Mar 04, 2026, 06:51 PM UTC
We have identified the issue and are working to resolve it. We will post out next update within an hour.
- identified Mar 04, 2026, 07:50 PM UTC
We are still working hard to resolve the issue. We will post our next update within two hours.
- identified Mar 04, 2026, 09:57 PM UTC
We are still working hard to resolve the issue. We will post our next update within three hours.
- monitoring Mar 04, 2026, 10:31 PM UTC
We have resolved the issue and are now monitoring our systems as they return to normal operation. We will post our next update within three hours.
- monitoring Mar 05, 2026, 01:13 AM UTC
We continue to monitor our systems as they recover. We will post our next update within three hours.
- monitoring Mar 05, 2026, 04:00 AM UTC
We continue to monitor our systems as they recover. We will post our next update within four hours.
- resolved Mar 05, 2026, 06:22 AM UTC
We are no longer experiencing alerts on ThreatSync/MDR ingestion services and this incident is now resolved. The systems are operating normally at this time.