# Bullhorn Recruitment Platform Faces Major Outage Following Cyberattack Global recruitment software provider Bullhorn struggles to restore full functionality after a significant security incident. - **Source:** [www.theregister.com - Articles](https://brifing.si/source/2c34ea50-d341-4a10-925d-12c012a9ad10) - **Published:** 2026-10-20 - **Topic:** [Software & Engineering](https://brifing.si/c/engineering) - **Original article:** - **On Brifing:** https://brifing.si/s/31386d26-4e80-4410-a458-9125cde259a2 ## Initial Platform Outage Detected The disruption began on Friday, October 16, when Bullhorn identified issues syncing job postings to Indeed. By Saturday morning, the situation escalated into a full-scale platform outage. The company confirmed it was managing a serious cyber incident, forcing a temporary system shutdown to contain the threat and prevent further unauthorized access. ## CrowdStrike Leads Forensic Investigation Bullhorn engaged cybersecurity specialists from CrowdStrike to assist in the investigation and service restoration process. While systems began returning to operational status by Monday, the recovery remains incomplete. The company is currently conducting a deep forensic analysis to determine the root cause of the intrusion and assess the full extent of damage. ## Ongoing Service Performance Degradation Despite systems coming back online in the US, UK, and Australia, many users report persistent technical difficulties. As of Tuesday, specific products including the Talent Platform, Onboarding365, and Time Expense tools continue to show degraded performance. Users are still struggling with single sign-on authentication, password resets, and various platform customizations. ## Data Exfiltration Status Uncertain A critical question remains regarding whether attackers successfully exfiltrated sensitive customer data during the breach. Bullhorn stated that the forensic investigation is ongoing and has not yet confirmed any data compromise. The company committed to notifying affected customers if their information is found to have been accessed by the threat actors. ## Security Measures for Customers To mitigate further risks, Bullhorn has mandated password resets for all users not utilizing single sign-on. Additionally, customers relying on API integrations have been instructed to rotate their credentials immediately. These steps aim to secure individual accounts while the broader platform environment undergoes rigorous security hardening and ongoing forensic verification efforts. ## Warning Against Opportunistic Phishing Bullhorn issued a warning regarding potential social engineering attempts following the incident. Threat actors may impersonate company personnel via email, phone, or text to solicit credentials. The firm explicitly stated that employees will never request passwords, multi-factor authentication codes, or verification tokens, urging customers to remain vigilant against such fraudulent communications. ## Operational Impact on Agencies The outage severely disrupted recruitment agencies that rely on Bullhorn for daily operations. Agencies lost access to critical candidate records, job applications, and placement data. In some instances, the interruption affected systems used for processing payroll, highlighting the deep operational dependency recruitment firms have on the platform's continuous availability and performance. ## Lack of Attribution Details The specific identity of the attackers and the nature of the intrusion remain undisclosed. Bullhorn has not confirmed whether ransomware was involved in the attack or provided details on the entry point. As the company focuses on stabilization, the lack of public attribution underscores the complexity of modern enterprise security incident responses. ## Sources covering this story - https://www.theregister.com/security/2026/10/20/bullhorn-sees-red-after-cyberattack-knocks-recruitment-platform-offline/5304114 — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._