Bullhorn Cyber Incident developing now.
Description
Bullhorn, a provider of ATS/CRM and related recruitment software platforms, is currently experiencing a cyber incident causing a system-wide outage and service disruption. Access to Bullhorn systems has been temporarily disabled to contain the incident while investigations are ongoing with the assistance of cybersecurity specialists. The disruption affects multiple Bullhorn services globally, requiring non-SSO users to reset passwords upon login once services are restored. The incident is actively being investigated, and updates are being posted on Bullhorn's official status page.
Reddit Discussion
Anyone use Bullhorn? They are currently trying to recover from an attack. Story still developing.
Links cited in this discussion
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Bullhorn is undergoing a cyber incident resulting in a major outage across its ATS/CRM and associated platforms worldwide. The company has temporarily disabled access to its systems to contain the incident and is working with Crowdstrike cybersecurity specialists to investigate and resolve the issue. The outage impacts multiple Bullhorn services including ATS/CRM clusters, automation modules, Talent Platform, Back Office, and others across regions such as Australia, UK, EMEA, and the US. Non-SSO users will be required to reset passwords upon service restoration. The incident is ongoing with no confirmed details on the nature of the attack or data compromise. Bullhorn is providing continuous updates via its status website.
Potential Impact
The incident has caused a system-wide outage affecting Bullhorn's ATS/CRM and related services globally, leading to temporary loss of access for users. Key functionalities such as placement syncing, time entry, and approval processes are disrupted, particularly for customers using integrated Bullhorn Time & Expense solutions. The outage impacts multiple service clusters and regions, causing operational disruption for Bullhorn customers. There is no public confirmation of data breach or exploitation details at this time.
Defensive Guidance
Bullhorn has temporarily disabled access to affected systems to contain the incident and is actively investigating with cybersecurity experts. Users should monitor Bullhorn's official status page for updates and follow instructions to reset passwords upon service restoration. No additional user action is currently recommended until further information is provided by Bullhorn.
Technical Details
- Source Type
- Subreddit
- cybersecurity
- Reddit Score
- 0
- Discussion Level
- minimal
- Content Source
- reddit_link_post
- Post Type
- link
- Newsworthiness Assessment
- {"score":30,"reasons":["external_link","newsworthy_keywords:incident","established_author","very_recent"],"isNewsworthy":true,"foundNewsworthy":["incident"]}
- Has External Source
- true
- Trusted Domain
- false
Threat ID: 6ad584f02cdf04f656f6add5
Added to database: 10/19/2026, 02:48:16 UTC
Last enriched: 10/19/2026, 02:48:20 UTC
Last updated: 10/19/2026, 04:48:13 UTC
Views: 16
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.