Staffing operations stall as Bullhorn contains cyberattack
This is a DailyCyber.News update, brought to you by BareMetalCyber.com, for Tuesday, October 20th, 2026.
Bullhorn disabled access to its staffing platform after a cyberattack caused a system-wide outage. Major recruitment, onboarding, back-office, automation, and talent services were unavailable or degraded. The company said it isolated the issue and removed the immediate threat, but it had not determined whether customer data was taken. Restoration work continued without a published completion time.
For leaders, the operational impact can spread well beyond an unavailable application. More than ten thousand customers rely on Bullhorn for workflows that can include candidate tracking, onboarding, and payroll. For defenders, password resets and A P I credential rotation need to be coordinated carefully with integrations as services return. Customers can request data exports to reduce disruption, and Bullhorn expects unposted time records to be reprocessed. Whether customer data was removed remains an open question while the forensic investigation continues.
Organizations should activate manual staffing and payroll procedures now, then prepare password and A P I credential rotations for a controlled return to service.
For the sources and the full Daily Cyber newsletter, visit DailyCyber.News.
