A cyber incident disrupted recruitment systems at Massachusetts-based Bullhorn, leaving job publishing and integrations impaired Tuesday even after staffing firms regained access to its core platform.
The Boston-based company says more than 10,000 staffing and recruitment businesses use its cloud software to find candidates, manage client relationships and handle connected staffing processes.
Bullhorn reported a systemwide outage Saturday before disabling access to contain the cyber incident. It brought in cybersecurity company CrowdStrike and restored regional access in stages.
Bullhorn is rebuilding features after removing technology to contain the incident. “We took an aggressive approach to reducing security risk and removed underlying technology that supported a significant number of features,” Bullhorn said in its known-limitations notice.
That notice lists job publishing, reporting and some integrations as unavailable. Administrators cannot change certain system settings or add new users, and older software connections using Bullhorn’s legacy interface remain offline.
Bullhorn said Tuesday that all regions were online and it had fixed single sign-on problems. It was still restoring customizations, and some users encountered loops while resetting passwords.
New Zealand recruiter Potentia warned that responses to applications could be slower during restoration. It activated its incident response but said Bullhorn had not advised that Potentia information was affected.
Bullhorn’s customer FAQ says investigators have not determined whether customer data was stolen. It identifies the applicant-tracking and customer-management platform as affected, while distinguishing other products that showed no indication of direct compromise.
Chip in once
If this reporting helped you, a one-time tip helps cover hosting, tools and future investigations.
Support us monthly
A small monthly pledge keeps independent coverage and our reader tools online for everyone.
Customers who do not use single sign-on must reset their passwords. Those running their own integrations must also update the credentials used to connect to Bullhorn.
The uneven recovery echoes July’s security-related ShareFile shutdown at Massachusetts-based Progress Software. Cloud access returned while customers were told to keep privately managed storage servers offline during the investigation.
Bullhorn also warned Tuesday that criminals might impersonate its staff to seek passwords or verification codes. It has not announced when all disabled functions will return.
