Whalebone incident

Password reset required to restore Whalebone Admin Portal access

Ongoing since 03:35 PM UTC, affecting Europe (exo-01) and Europe (eu-01) and 1 more.

investigating Nov 11, 2026, 03:35 PM UTC

We investigated and tested several recovery options to restore access without requiring action from users. Unfortunately, these efforts were unsuccessful, and users must reset their passwords to regain access to the Whalebone Admin Portal. No passwords were leaked, and there was no unauthorized access. During an internal authentication update, a security value required to verify existing passwords was unintentionally changed. Please select “Send password reset email” on the sign-in page after unsuccessful login attempt and follow the instructions in the email. After resetting your password, you will be able to sign in normally. API-key authentication remains operational, and API keys do not need to be changed. We sincerely apologize for the disruption and inconvenience this has caused. We have already implemented measures to reduce the risk of recurrence and will conduct an internal post-incident review to determine what led to this event and identify any additional preventive actions.

Started
Nov 11, 2026, 03:35 PM UTC
Resolved
Ongoing
Duration
● 1h 16m
Detected by Pingoru
Nov 11, 2026, 03:35 PM UTC

Affected components

Europe (exo-01)Europe (eu-01)AuraPeacemakerImmunityAdmin Portal

Update timeline

  1. investigating Nov 11, 2026, 03:35 PM UTC

    We investigated and tested several recovery options to restore access without requiring action from users. Unfortunately, these efforts were unsuccessful, and users must reset their passwords to regain access to the Whalebone Admin Portal. No passwords were leaked, and there was no unauthorized access. During an internal authentication update, a security value required to verify existing passwords was unintentionally changed. Please select “Send password reset email” on the sign-in page after unsuccessful login attempt and follow the instructions in the email. After resetting your password, you will be able to sign in normally. API-key authentication remains operational, and API keys do not need to be changed. We sincerely apologize for the disruption and inconvenience this has caused. We have already implemented measures to reduce the risk of recurrence and will conduct an internal post-incident review to determine what led to this event and identify any additional preventive actions.

Your product runs on more than Whalebone

Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.

Add your stack →