Bullhorn Security Incident: Action Needed for Career Portal Integrations – Haley Marketing

Last updated: October 22, 2026

Current Status: (updated Thursday, October, 22, 2026, 4:30pm ET)

Our team is in contact with Bullhorn, but they haven’t given us a resolution yet. We’re following up and will post an update here when we have more information.

Keep your jobs moving while you wait:

You don’t need to pause your recruiting while the integration is down. You can add jobs directly in myHaley so they keep posting and collecting applications. When the Bullhorn integration is working again, those applications will sync over to Bullhorn.

If you missed our webinar on how to add jobs manually to myHaley, you can view it here.

We also have instructions on how to add jobs in the following article - please note that you will need to make sure your job IDs for the jobs added in myHaley exactly match the jobs in Bullhorn for the applications to sync: https://helpme.haleymarketing.com/hc/en-us/articles/200291696-Posting-Jobs-in-MyHaley

Current Status: (updated Thursday, October 22, 2026, 7:30 AM ET)

Bullhorn’s latest update (6:15 AM ET today) shows steady progress:

Bullhorn ATS/CRM login: Access was restored last night after an outage on Oct 21 from 1:35 to 6:10 PM ET. A brief overnight SSO login issue for some users has also been resolved. Some users may still see a password-reset loop when logging in. Bullhorn is working on this separately. Please don’t reset your Bullhorn password unless Bullhorn tells you to.
Bullhorn products back online: FastForward, Market IQ, Akyla, SourceBreaker, Bond APAC Job Portal, and Target Recruit.
Still offline as a precaution: Talent Platform and Bullhorn Back Office (BBO). Bullhorn took these offline to protect against the worldwide PHP vulnerabilities and will bring them back once patches are applied.
Not affected by the PHP issue: Bullhorn ATS/CRM and its related products, according to Bullhorn.
Oct 17 cyber incident: Still contained, with no new activity detected. CrowdStrike and Kroll continue to monitor Bullhorn’s systems around the clock.

For Haley Marketing clients: Our career portal and our Bullhorn integrations are not affected, and there’s nothing you need to do on your website. We’re following Bullhorn’s updates closely and will keep this page current. For Bullhorn’s own updates, visit status.bullhorn.com.

Updated Oct 21, 2026, 1:50 PM ET

Login delays. Some Bullhorn users in all regions are having trouble logging in. Bullhorn says this is caused by the high volume of password and multi-factor authentication changes syncing across its system, and it expects this one-time sync to finish within a few hours. No action is needed, and you don't need to open a support ticket with Bullhorn.

Please don't change your Bullhorn password. Bullhorn is still asking all customers not to change passwords, because doing so delays getting your access back. Try logging in about every 30 minutes.

Some Bullhorn products are offline as a precaution. Because of newly announced PHP security vulnerabilities, Bullhorn has taken some of its PHP-based products offline, including Talent Platform. Bullhorn says the October cyber incident remains contained. See Bullhorn's status page for the latest.

What this means for your website:

Job feeds from Bullhorn are still paused. Your listings will update automatically once Bullhorn restores job publishing.
Need to post a job now? You can post jobs manually to your website through MyHaley. You must include the exact Bullhorn Job ID, so applications can be processed back into Bullhorn later.
Applications submitted on your site will be sent to Bullhorn once the connection is back. Please don't enter them by hand, since that creates duplicates.
Please don't reset or change the Bullhorn user that connects your career portal. We're working directly with Bullhorn on those integration credentials.
Bullhorn will never ask for your password, MFA code, or verification token by email, phone, or text.

We're in close contact with Bullhorn and will update this page as soon as they share more.

Update: Oct 21, 2026, 9:45 AM ET

Bullhorn is now asking all customers not to change their Bullhorn passwords. Bullhorn says resetting your password will delay getting your access back. Please try logging in about every 30 minutes until access is restored.
What this means for your website:

Please don’t reset your Bullhorn API password. Bullhorn has told us it will reset the integration credentials itself, so a password changed now may stop working again.
Job feeds from Bullhorn are still paused because Bullhorn’s job publishing is still offline. Your listings will update automatically once Bullhorn restores it.
Applications submitted on your site will be sent to Bullhorn as soon as the connection is back.
Bullhorn will never ask for your password, MFA code, or verification token by email, phone, or text. Be cautious with any message that does.

We’re in close contact with Bullhorn and will update this page as soon as they share more. If you have questions, our team is happy to help.

Update: Oct 20, 2026, 3:00 PM ET

Bullhorn reports that all regions are online and continues to bring features back. Your Bullhorn admins can now edit users and set passwords again, and SSO access to connected apps is restored in the US, with other regions still in progress.

Job feeds are still paused. Bullhorn still lists job publishing and parts of its API as offline, and new users can’t be created yet. Your jobs will start flowing to your website again once Bullhorn restores that access and issues the new integration credentials we’ve requested. You don’t need to change anything on your end for job feeds right now. We’ll update this page as soon as that changes.

Applications: Applications submitted while the integration was down will be reprocessed into Bullhorn once the connection is restored. Please don’t re-enter them by hand.

Watch for phishing. Scammers may pose as Bullhorn by email, text, or phone. Bullhorn will never ask for your password, MFA codes, or verification tokens. Reset your password only by going directly to the Bullhorn login page.

Update: Oct 19, 2026, 4:45 PM ET

Bullhorn ATS/CRM is back online in the US, UK/EMEA, and Australia. Talent Platform is still offline, and Bullhorn expects it back around 6 PM ET. Check Bullhorn's status page for the latest.

When you log in, Bullhorn will ask you to reset your password and set up multi-factor authentication, unless your company signs in through SSO.
Go directly to your usual Bullhorn login page. Don’t use links in emails or texts. Bullhorn will never ask for your password, MFA code, or verification token.
If you get stuck in a loop while resetting, wait a few minutes before trying again.
If you use SSO and can’t log in, open a ticket with Bullhorn support.
Please don’t change the Bullhorn user that connects your career portal. We’re working with Bullhorn to reset those integration credentials and will confirm when jobs and applications are syncing again. Please don’t enter these applications into Bullhorn by hand, since that will create duplicates.

Update: Oct 19, 2026, 10:00 AM ET

Bullhorn expects US access back around 1 PM ET today. Australia and the UK/EMEA are already back online. Check Bullhorn's status page for the latest times.

When you log in after access returns, Bullhorn will ask you to reset your password and set up multi-factor authentication, unless your company signs in through SSO.

If you get stuck in a loop while resetting, wait a few minutes before trying again. Bullhorn says this can happen while its data centers come back online.

Bullhorn is still looking into login problems for SSO users.

Summary

On October 18, 2026, Bullhorn reported an incident affecting the Bullhorn platform. Bullhorn has temporarily disabled customer access while it restores service. When access is restored, Bullhorn will require users to reset their passwords.

What happened

Bullhorn notified us on October 18, 2026 that it had detected a cyber incident affecting its platform. Bullhorn believes the activity has been contained and is beginning to restore customer access. Its investigation is ongoing, and Bullhorn will share findings when the investigation is complete.

This incident occurred at Bullhorn. HMG systems were not affected.

How this affects your career portal

Your career portal connects to Bullhorn using a Bullhorn user account. While Bullhorn access is disabled, and until the password on that account is reset and updated with us:

New or updated jobs in Bullhorn may not appear on your website
Applications submitted through your website may not reach Bullhorn until your integration is reconnected. Once Bullhorn restores access and we’ve updated your integration, we’ll work to send any delayed applications to Bullhorn and let you know if anything needs your attention.

What you need to do

Watch for Bullhorn to restore access. Bullhorn is posting estimated restoration times at status.bullhorn.com and updating them every two hours.
Reset the password for your own Bullhorn login when prompted. You don’t need to send us any passwords. We’re working with Bullhorn to reset your career portal integration directly.
We'll update your integration and confirm when jobs and applications are syncing again.

Need Bullhorn data urgently?

If you need access to your data before Bullhorn restores service, email Bullhorn Support at bullhornsupporttickets@bullhorn.com with your Bullhorn username, a brief description of the data you need, and the date range.

Questions?

Contact our team at success@haleymarketing.com. We'll update this article as Bullhorn shares more information.

Bullhorn's notice (full text)

From: Mitesh Ashar at Bullhorn <product-updates@bullhorn.com>
Date: Sunday, October 18, 2026 at 10:50 AM
To: HMG Engineering
Subject: Update Oct 18 Cyber incident

Hello Support,

An update on the October 18 cyber incident affecting the Bullhorn Platform.

We believe we have contained the activity and are beginning the process of restoring customer access. Access remains temporarily disabled while we prepare to bring services back online.

Service restoration: We are beginning the process of restoring system access. Estimated restoration times by service are now posted at status.bullhorn.com. We will update that information every two hours.
Urgent data access: If you need access to data before your service is restored, please see the instructions for creating a support case below.
Password resets and MFA: All Bullhorn ATS/CRM users who do not have single sign-on (SSO) configured for authentication will be required to reset passwords when access is restored, and Multi-Factor Authentication (MFA) will be required.
Investigation: Our incident investigation is ongoing. We will share findings when the investigation is complete.

We know this interruption is disrupting your business, and we're sorry. Our teams are working around the clock to restore access as quickly and safely as possible. We will keep you informed throughout the recovery.

Sincerely,
Mitesh Ashar
Chief Customer Officer
Bullhorn

Urgent Data Access Requests: contact Support by emailing bullhornsupporttickets@bullhorn.com. Please include the following details:

Your Bullhorn username
Brief description of data required
Date Range for requested data