The American recruitment software company Bullhorn has disabled access to its cloud-based recruitment and candidate lifecycle management platform in an effort to contain a cyberattack that resulted in a widespread system-wide service outage.
The company stated that it has managed to isolate the issue and eliminate the immediate threat. Its teams are currently working to restore services gradually in collaboration with cybersecurity specialists from CrowdStrike, following thorough security reviews to determine the scope of the incident.
Sequence of outages and operational impact
Technical issues began appearing to users on Friday when the company's clients encountered problems posting jobs through the application. The following day, the company officially announced a widespread outage affecting its platform, later confirming that the underlying cause of these disruptions was a deliberate cyberattack.
The company's service status page reported that most services are currently undergoing maintenance or experiencing performance degradation, with the exception of limited services such as Adapt, eEmpACT, and StaffSuite, which continue to operate normally. Conversely, major systems including the Applicant Tracking System and Customer Relationship Management (ATS/CRM) platform, automation tools, backend systems, the talent platform, and sandbox environments have been severely impacted.
Security measures and data recovery
Bullhorn explained through its FAQ page that digital forensic investigations are still ongoing to determine whether customer data has been stolen or leaked, noting that it will communicate directly with affected parties if any data breach is confirmed.
As part of heightened precautionary security measures, the company has imposed a set of technical requirements on users and systems:
- Requiring all non-SSO (Single Sign-On) users to reset their passwords upon their next login.
- Requesting the rotation of API passwords to protect software integrations.
- Updating client-secrets at a later stage, which will be performed automatically for company-hosted versions.
- Providing customers the opportunity to request data exports via technical support to minimize operational disruption.
The company has not yet provided a precise timeline for the full restoration of all affected services, urging customers to monitor the service status page for live updates.