On 16th October 2026 all of Bullhorn’s services were taken offline due to a cyber incident.
We have detected a cyber incident on the Bullhorn Platform. We have temporarily disabled access to our systems in order to contain the activity while we investigate further. We are working with cybersecurity specialists from CrowdStrike and will resume access when the activity is safely resolved.
This means that both CRM (your login to Bullhorn to manage jobs and applications) and the API were taken offline.
Were our services affected?
Yes, all of our services that utilise an API connection such as job board sync, candidate registration, application submission, data imports etc.
With the Bullhorn API being taken offline due to the cyber attack, when our scripts attempt to connect to the API, instead of the API performing the tasks we request, we are greeted with a ‘system down’ message.
What happens to our lost data during the outage?
Don’t worry, all of our systems have measures in place for this exact scenario. When the API goes offline, our scripts recognise this and store a copy of the data temporarily. They then try at intervals to submit the data, once the API is back up and running, the data is submitted and the temporary local copy destroyed (depending on your settings at time of project creation).
Automation scripts will resume as soon as API access is returned. Our scripts for the most part (unless requested) will simply continue where they left off meaning no lost or missing data after the script resumes.
Have we lost job applications?
This is the main thing recruiters have been contacting us about. What happens to the job applications when the Bullhorn API is down?
Don’t worry, for most customers (unless specifically asked not to), application data is saved if the API is unavailable for any reason. Once the API is back up and running, we can loop through your applications and submit the ones that didn’t make it through during the outage – NO LOST APPLICATIONS.
Is our job board down?
No, we sync your job data into your website instead of a direct link, partly for this exact reason. With data synced to your own website, if the API is unavailable, your job board remains up and running. Of course it won’t be able to update jobs whilst the API is out, but the board stays in place. If you are interested in the other reasons why we sync job data, get in touch, it’s rather interesting if you are into that sort of thing.
Was any of our data compromised?
Everything looks good on our side. We have thoroughly tested our own servers that communicate with the API and we found nothing malicious. Our services utilise a safe connection to the Bullhorn API, some projects pull data from the API and store elsewhere (such as our MailChimp or Brevo email sync). If the cyber attack made any changes to your Bullhorn data, there is a chance some of that manipulated data was synced over into your other services.
What happened with the cyber attack on Bullhorn?
We don’t know at time of writing, Bullhorn have not released any further details.
What do we do?
It’s a case of waiting for an update from Bullhorn as they are the only ones who can reopen their systems.
You can also check the Bullhorn status page at https://status.bullhorn.com/. Some systems are reported to be coming back online as at 10.20am on 19th October 2026.
