Breaches and incidents
Bullhorn: recruitment software platform taken offline to contain cyber incident
Bullhorn reported CRM syncing issues from 16 Oct and by 08:04 EDT on 17 Oct said its entire system was down, stating “We have detected a cyber incident on...
- Disclosed
- Verification
- Confirmed by two or more outlets
What happened
- Bullhorn reported CRM syncing issues from 16 Oct and by 08:04 EDT on 17 Oct said its entire system was down, stating “We have detected a cyber incident on the Bullhorn Platform” and “We have temporarily disabled access to our systems to contain the activity” (Cyber Daily); OODAloop said ATS, CRM, automation and back-office tools for thousands of staffing clients were affected.
- Root cause: not disclosed.
- No attacker named; Cyber Daily said no threat actor had claimed responsibility.
- Bullhorn worked with CrowdStrike, restored services in AUS, EMEA/UK and US on 19 Oct, required password resets for non-SSO users and API password rotation (OODAloop), and said “we have not yet determined whether customer data was exfiltrated.”