2026 Bullhorn — cyber incident takes staffing platform offline; data exfiltration under investigation
Data compromised
Not yet determined; Bullhorn says it has not established whether customer data was exfiltrated and will notify affected individuals if confirmed. ATS/CRM, Back Office, Talent Platform and other services were down; non-SSO users must reset passwords and API passwords are being rotated.
Technical writeup
Verified Bullhorn statement: "We have detected a cyber incident on the Bullhorn Platform." Customers saw job-posting failures Friday Oct 16; Bullhorn reported a system-wide outage the next day, then confirmed the cyberattack, isolated it and began restoring services after security reviews. No threat actor named; ransomware not stated. Bullhorn serves 10,000+ staffing firms, so any data impact would reach candidates and clients downstream. companyConfirmed true (incident); recordsAffected 0.
Root cause
Not disclosed. Bullhorn detected a cyber incident on the Bullhorn Platform and disabled access to contain it (CrowdStrike assisting).