INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Bullhorn Deploys Emergency Patch to Contain Cyberattack on Staffing Platform

| 2026-10-19 18:51 HIGH HIGH DATA BREACH
JSON
Executive Summary
AI-generated
Bullhorn, an American software company specializing in cloud-based staffing and recruitment solutions, experienced a cyberattack on October 19, 2026. The attack caused a system-wide outage affecting the Bullhorn platform, with most services under maintenance or degraded performance except for Adapt, eEmpACT, and StaffSuite. According to Bullhorn's status page, customers started experiencing issues with job posting in the Bullhorn application on Friday, followed by a confirmed cyberattack that temporarily disabled access to systems to contain the activity while investigating further. A forensic investigation has been initiated, but it is not yet determined whether customer data was exfiltrated. The company promised to notify affected individuals directly if a data breach is confirmed and is working with CrowdStrike specialists to restore services following thorough security reviews.
Technical Mitigations AI-generated
• Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
NORTH_AMERICA NORTH_AMERICA technologytechnology
Incident Timeline
‎2026/10/19
Bullhorn took its staffing platform offline to contain a cyberattack, affecting multiple services and potentially exposing customer data.
organisation CrowdStrike
Currently, its team is working to restore services following thorough security reviews conducted with help from CrowdStrike specialists.
organisation FAQ
In a FAQ page, Bullhorn says that a forensic investigation has been started and "not yet determined whether customer data was exfiltrated."
organisation Adapt
According to the firm’s status page , most of the services are under maintainance or have degraded performance, except for Adapt, eEmpACT, and StaffSuite, which remain operational.
organisation StaffSuite
According to the firm’s status page , most of the services are under maintainance or have degraded performance, except for Adapt, eEmpACT, and StaffSuite, which remain operational.
organisation Automation, Back Office
Major outages affect ATS/CRM, Automation, Back Office, Talent Platform, and sandbox environments.
organisation Amplify, Analytics, Messaging,
At the time of writing, degraded performance was reported for Bullhorn for Salesforce and associated products, Onboarding365, and additional solutions including Amplify, Analytics, Messaging, SourceBreaker, VMS Sync, Data Hub, Erecruit, SalesDuel, and VMS Access.
organisation SourceBreaker
At the time of writing, degraded performance was reported for Bullhorn for Salesforce and associated products, Onboarding365, and additional solutions including Amplify, Analytics, Messaging, SourceBreaker, VMS Sync, Data Hub, Erecruit, SalesDuel, and VMS Access.
organisation VMS Sync
At the time of writing, degraded performance was reported for Bullhorn for Salesforce and associated products, Onboarding365, and additional solutions including Amplify, Analytics, Messaging, SourceBreaker, VMS Sync, Data Hub, Erecruit, SalesDuel, and VMS Access.
organisation Data Hub, Erecruit
At the time of writing, degraded performance was reported for Bullhorn for Salesforce and associated products, Onboarding365, and additional solutions including Amplify, Analytics, Messaging, SourceBreaker, VMS Sync, Data Hub, Erecruit, SalesDuel, and VMS Access.
organisation SalesDuel
At the time of writing, degraded performance was reported for Bullhorn for Salesforce and associated products, Onboarding365, and additional solutions including Amplify, Analytics, Messaging, SourceBreaker, VMS Sync, Data Hub, Erecruit, SalesDuel, and VMS Access.
organisation VMS Access
At the time of writing, degraded performance was reported for Bullhorn for Salesforce and associated products, Onboarding365, and additional solutions including Amplify, Analytics, Messaging, SourceBreaker, VMS Sync, Data Hub, Erecruit, SalesDuel, and VMS Access.
organisation API
Also, as per the FAQ page , API passwords require rotation to protect integrations, while client-secret changes will follow later.
organisation BleepingComputer
BleepingComputer has contacted Bullhorn to request more information about the attack, and we will update this post with their response when received.
organisation The Blue Report 2026
The Blue Report 2026 measures defenses technique by technique across 338 million simulations run in customer production environments.
victims 10,000 customers
The company says it serves more than 10,000 customers worldwide.
Tactical Metrics
Metrics
victims
10,000
Customers
The company says it serves more than 10,000 customers worldwide.
Intelligence Sources
BleepingComputer 2026-10-19