2PACX 1v T7Gy VY26q MXg HCCp5v7s Qrn Gxf Ga RCVUgx RVXohcw W B QI4dx1z Uq L8Qmn LEn Ay Tt Lucqk HFewuv Pub

Last updated: 2026/10/19 1:54 PM ET. The most current information is always at .

What happened? We detected a cyber incident on the Bullhorn Platform. As a precaution, we temporarily disabled access to our systems to contain the activity while we investigate. We’re working with outside cybersecurity specialists and are currently in the process of restoring service .

Was my data affected? Was any personal information (PII) exposed? Our forensic investigation is ongoing, and we have not yet determined whether customer data was exfiltrated. If we determine that your data was affected, we will you as soon as possible. We are committed to being transparent and will findings as they become available, and we will comply with applicable notification obligations.

What is the status of the incident?

We are restoring your service after performing a comprehensive security review internally and with 3rd party experts. Following the recent incident, our team isolated the issue and eradicated the immediate threat. We are implementing enhanced protective controls across all facets of our environments and software to prevent it from happening again. We are rigorously testing our systems to ensure integrity, and, with the assistance of forensic experts, are monitoring closely as we come back online. Your data security remains our highest priority.

Which systems or environments are affected? We’re continuing to investigate the full scope. Current service availability by system is posted at status.bullhorn.com .

I am using a different solution other than Bullhorn ATS/CRM. Was I impacted by this cyber event? The cyber incident affected Bullhorn ATS/CRM. There is no indication that other Bullhorn solutions, including our Salesforce-based products, and services such as Bullhorn Automation, Sourcebreaker and VMS Sync were affected by the incident.

I’m not sure if my issue is related; how can I support?

Not all users are currently able to access the HUB to log support tickets. In the meantime, please email support at: [email protected] or, if your issue is urgent, please call at:

US: +1 (617) 478-9126

Australia: +61 (0) 2 8073 5089

When will service be restored? When will my region be back? We are working to restore access. Estimated restoration times are posted at status.bullhorn.com and may change as work progresses. We cannot provide restoration times beyond those posted there.

Can my region or environment be restored earlier / out of sequence? To ensure we can fully monitor systems as they come back online, we’re unable to bring systems up outside the windows posted at status.bullhorn.com .

What should I do if systems aren’t back by the time I need them? We’d encourage you to monitor the availability targets on status.bullhorn.com. If the posted timeframes work for your operations, a separate backup plan may not be necessary, but please plan against the status page, as timing may shift.

Will users need to reset their passwords? Yes. As systems come back online, non-SSO users will be prompted to reset their password on login using 2-factor authentication for additional security. I reset my password but was unable to log in. Why is that? After resetting your password, please wait 1 minute before trying to log in. It will take a little time for the new credentials to propagate across our infrastructure. After 1 minute you will be able to login.

Does that include Bullhorn Back Office (BBO)? Customers can log in through BBO standalone. Those passwords have not been reset and were not impacted.

What changes for API users?

We are requiring rotation of API passwords and Client Secret to protect the integrity of integrations.

How do I get a new API user password?

Your API user password has been expired for you. You must log into Bullhorn ATS/CRM with your API user and password. When you start the log in process, you will be required to create a new password. You will also be taken through an email verification process. If your API user does not have an associated email address, you must log a support case to update.

How do I make sure my customizations and integrations are working correctly? It depends on who hosts them:

Hosted by Bullhorn: The Bullhorn team will handle this for you. No action is needed.

Hosted by you or a third party: You will need to update the API credentials in your code or configuration and redeploy the application. In order to get a new API password, you must log into Bullhorn ATS/CRM with your API user and password. When you start the log in process, you will be required to create a new password. You will also be taken through an email verification process. If your API user does not have an associated email address, you must log a support case to update.

Bullhorn Partners and Licensed Integrators: Bullhorn is communicating directly with Marketplace partners, Developer partners, and licensed integrators to provide instructions. If you have additional questions, email marketplacesupport@bullhorn.com .

Do I need to update my Client Secret? Not yet. We’ll eventually require all customers to update their Client Secret, and we’ll more details when that happens. Until then, your integrations and customizations will keep working without a Client Secret update.

Features & Capabilities

Are certain features in the user experience impacted? Following the incident, protecting your data and systems was our overriding priority. We took an aggressive approach to reducing security risk and removed underlying technology that supported a significant number of features. This required us to rebuild those features, resulting in the changes and limitations listed here . We know this creates disruption for your teams, and we’re very sorry. We are working to restore functionality safely and will update this page as fixes become available. What will happen to the data from other Bullhorn solutions once Bullhorn ATS/CRM is re-enabled? These systems will begin syncing data shortly after coming back online. This includes Bullhorn Time and Expense, Talent Platform, Onboarding 365, Bullhorn Automation, and VMS Sync. Depending on data volume, syncing may take a few hours to complete, after which systems will function normally.

Data & business continuity

Can I get a full export or backup of my data? We understand the need for business continuity. Data-extract requests are being handled through a dedicated process given the sensitivity of the current situation. Please support via email, and they will log your request and steps.

What happens to time records that weren’t posted during the outage? When systems are back online, time records will be reprocessed from Bullhorn Time & Expense, which will apply the appropriate business rules.

Will Bullhorn provide notifications under data privacy laws? The investigation remains ongoing. As determinations are made regarding data privacy obligations, Bullhorn will provide required notifications to its customers according to applicable data privacy laws and its contractual commitments.

Will Bullhorn be issuing service credits? Our immediate priority is restoring access securely. Once the incident is resolved, we will review our performance against applicable service level agreements (SLAs) and address service credits.

What assurance will we have that it’s safe before we reconnect? We are restoring your service after performing a comprehensive security review internally and with 3rd party experts. We have isolated the issue and are strengthening security controls, testing systems, and closely monitoring activity as services come back online. Protecting your data remains our highest priority.

We have a contractual obligation to notify our customers after becoming aware of a possible data breach. Can Bullhorn provide me some guidance here? Our forensic investigation is ongoing, and we have not yet determined whether customer data was exfiltrated. If we determine that your data was affected, we will you as soon as possible. We are committed to being transparent and will findings as they become available, and we will comply with applicable notification obligations.

If you have contractual obligations to your customers, please support and open a ticket. We are tracking all customer requirements for future action. When we determine that notices from Bullhorn are appropriate based on the investigation findings, we will assist clients with their notices under applicable data protection laws.