Bullhorn, a US cloud software company whose platform helps staffing and recruitment firms track candidates, onboard workers and run payroll, has disabled access to its systems after a cyberattack. According to BleepingComputer, customers first saw trouble with job posting on Friday; the next day Bullhorn reported a system-wide outage and later confirmed a cyber incident. The company says it serves more than 10,000 customers worldwide.
Bullhorn says it has isolated the issue and eradicated the immediate threat, and is restoring services after security reviews with CrowdStrike. Its FAQ says a forensic investigation is under way and it has “not yet determined whether customer data was exfiltrated”; affected individuals will be notified directly if a breach is confirmed. No restoration timeline has been given, and the attacker and method have not been named. BleepingComputer says it has contacted Bullhorn for more details.
How to check if you’re affected
Affected products are Bullhorn platform services. Per BleepingComputer’s reading of Bullhorn’s status page, ATS/CRM, Automation, Back Office, Talent Platform and sandbox environments had major outages, several other products had degraded performance, and Adapt, eEmpACT and StaffSuite remained operational. Check Bullhorn’s status page for the product you use.
If your organisation uses Bullhorn, the vendor’s latest update says all non-SSO users must reset their passwords at next login, and its FAQ says API passwords need rotation to protect integrations, with client-secret changes to follow later. For Bullhorn-hosted instances this happens automatically. Customers can ask support for data exports, unposted time records will be reprocessed after restoration, and service credits will be reviewed once the incident is resolved. If you applied to jobs through a staffing firm that uses Bullhorn, watch for notification from the firm or Bullhorn.