US company Bullhorn, which provides cloud software for staffing and recruitment firms, disabled access to its platform to contain a cyberattack. The company serves more than 10,000 customers and is working with CrowdStrike specialists on recovery. It has not yet determined whether customer data was taken. Non-SSO users must reset passwords and API credentials are being rotated.

What it means: Recruitment platforms hold huge amounts of personal data: CVs, contact details, salary information and often identity documents. That makes them attractive targets. Bullhorn's decision to shut the whole service shows how serious the incident is, but also the dilemma every cloud provider faces: isolation protects data, yet it halts work for thousands of customers who cannot log hours or pay contractors. Forcing password resets and rotating API keys suggests the company is allowing for the possibility that credentials were exposed. For Greek businesses that rely on outside platforms for payroll, HR or CRM, the incident is a reminder of three things. First, they need a continuity plan if a provider is down for days. Second, API integrations should use keys that are easy to rotate. Third, under GDPR the controller remains accountable and should require prompt updates from the processor. How transparent the provider is will decide whether customers keep their trust.

Read the original on BleepingComputer

Related service: Custom software

Related stories