Bullhorn restores recruitment platforms following disruptive cyberattack

Recruitment software provider Bullhorn shut down its cloud-based staffing systems following a cyberattack that caused widespread service disruptions. Problems began on Friday, October 16, with job postings to Indeed before escalating into a full platform outage the following day. The US-based firm, which serves more than 10,000 customers worldwide, enlisted cybersecurity specialists from CrowdStrike to investigate the breach and eradicate the immediate threat. [1][2]

Although services began returning on Monday across the US, UK, and Australia, recovery remains uneven. Products including ATS/CRM, Automation, Talent Platform, Onboarding365, and Time & Expense continue to experience degraded performance, while Adapt, eEmpACT, and StaffSuite remained operational. Bullhorn has mandated password resets for all users not using single sign-on and instructed customers to rotate API passwords to protect software integrations. [1][2]

Bullhorn says an ongoing forensic investigation has not yet determined whether attackers stole customer data, promising to notify clients directly if private records were compromised. The outage disrupted critical agency functions, including candidate tracking, job applications, and payroll processing. The company has not confirmed whether ransomware was involved and warned customers to remain vigilant against opportunistic scammers posing as Bullhorn personnel. [1][2]