What happened to Bullhorn? What recruitment agencies should know

Information checked on 23 October 2026. This is a developing situation; consult the linked provider updates for current service availability.

When your recruitment software stops working, the first concern isn’t the technology.

It’s the candidate waiting for a call. The client expecting a shortlist. The consultant who needs their notes before an interview. And, for some agencies, the timesheets and payroll that cannot simply wait until tomorrow.

If you have been searching for “Bullhorn cyber attack” or wondering why parts of your recruitment software have been unavailable, you’re not alone.

Here is what the providers have confirmed, what remains uncertain, and how to think about your recruitment software without making a rushed decision.

Disclosure: This article is published by Zileo, an all-in-one recruitment platform with full CRM/ATS functionality, candidate sourcing and business development. We explain our own offering below, alongside links to the original incident updates.

What has Bullhorn confirmed?

Bullhorn confirmed a cyber incident affecting its platform and said it temporarily disabled access to contain the activity while investigating.

In its customer FAQ, last updated on 21 October, Bullhorn said it was working with external cybersecurity specialists and restoring services following security reviews.

Importantly, that FAQ stated that its forensic investigation was ongoing and that it had not yet determined whether customer data had been exfiltrated.

That is not confirmation of data theft. Equally, it is not confirmation that no data was affected. Customers should rely on Bullhorn’s direct notifications rather than speculation.

Bullhorn also described changes and temporary limitations to some features during recovery. For the latest position on your particular product, check its official status page and the customer FAQ linked there.

Was the Bullhorn cyber incident caused by PHP vulnerabilities?

Bullhorn says the two events were unrelated.

Its official incident update distinguishes the October 17 cyber incident from subsequently disclosed PHP vulnerabilities affecting certain other solutions.

That distinction matters. It would be inaccurate to describe every Bullhorn service interruption as the same attack—or to assume that every product in its portfolio was compromised.

In its 22 October update, Bullhorn reported that several PHP-affected products had been upgraded and restored, while work on Bullhorn Back Office continued.

Service status can change quickly. Read the dated incident updates rather than treating an older headline as a description of what is happening now.

What happened to BambooHR?

BambooHR also published an update about PHP-related security precautions.

On 21 October, it said it was temporarily taking its service offline in response to a vulnerability it identified as PHP2SHELL. It subsequently reported that security patches had been applied, testing completed, and access restored.

Its update marked the incident resolved at 18:01 UTC on 21 October, while warning that some temporary slowness or intermittent errors could remain.

A precautionary shutdown is not, by itself, evidence of a successful cyberattack or stolen data. The BambooHR notice reviewed for this article describes protective action and restoration.

BambooHR is also a different type of product: an HR platform with applicant tracking, rather than a direct equivalent of an agency-focused recruitment CRM.

What should recruitment agencies do now?

First, give your team clear instructions. Uncertainty tends to create improvised workarounds, and those can introduce their own risks.

A practical checklist:

• Follow official updates. Check which products and integrations your agency actually uses.
• Follow your provider’s recovery instructions. Password resets and integration changes should go through your authorised administrator.
• Watch for phishing. An unexpected “urgent recovery” email deserves extra scrutiny.
• Protect candidate information. Avoid moving sensitive records into personal inboxes or unapproved spreadsheets.
• Review continuity plans. Know how you will manage essential calls, interviews and payroll during an outage.
• Ask about data access and exports. Understand the approved process before you urgently need it.

Disruption is a reason to ask better questions. It is not a reason to abandon sensible checks when choosing another supplier.

Where does Zileo fit?

Zileo brings two equally important parts of an agency’s working day together: winning new business and finding candidates to deliver it.

Instead of treating those as disconnected activities, it combines:

• Live vacancy lead generation: identify hiring activity and potential client opportunities.
• Candidate sourcing: search for people relevant to the roles you are working on.
• Contact discovery and enrichment: find available email addresses and phone details for candidates and business contacts.
• Email and LinkedIn outreach workflows: organise follow-ups through multichannel sequences.
• AI-assisted messaging: help consultants prepare outreach without starting every message from scratch.
• Full CRM and ATS built in: manage client relationships and candidate pipelines in the same platform as your sourcing and outreach.
• Included credits and published allowances: see what your chosen package includes before committing.

The everyday benefit is straightforward: less copying information between tools, and more time spent having useful conversations.

Bullhorn, BambooHR and Zileo: compare the job you need done

These products overlap in places, but they are not interchangeable.

If you want a full CRM and ATS alongside sourcing, lead generation and outreach, we recommend Zileo. You can find the opportunity, start the conversation and manage the relationship without buying separate products for each stage.

Zileo brings everything a recruiter needs into one platform, without requiring add-ons or connections to separate tools. Prefer to keep parts of your existing setup? You can also plug Zileo into your existing tech stack through optional integrations. Those connections are a choice, not a requirement for accessing Zileo’s built-in functionality.

Do add-ons make recruitment software more expensive?

They can—but the answer depends on what you buy.

Bullhorn offers a broad product portfolio and a marketplace of integrations. That flexibility may be valuable for agencies with specialist requirements. It would not be accurate to suggest that every customer needs every add-on, or that Bullhorn lacks built-in recruitment functionality.

The useful comparison is the total cost of the setup your team needs:

• Core subscriptions.
• Additional sourcing and contact-data tools.
• Outreach and automation products.
• Usage credits and allowances.
• Implementation, migration and training.
• Any ATS or back-office systems you still need.

Zileo brings candidate sourcing, lead generation, contact discovery, multichannel outreach and a full CRM and ATS together in one subscription. There are no required add-ons and no additional feature charges for these capabilities—they are built in, not extras you need to purchase separately. That means one platform for the work, rather than a collection of separate subscriptions to connect and manage.

Savings are not automatic. Compare equivalent capabilities, usage levels and contract terms.

Think of Zileo’s Starter package as roughly the cost of a nice dinner for one, per user each month—depending on where you dine. It includes 600 credits, unlimited contact searches and published sequence and outreach allowances. Higher packages increase those allowances. See current pricing and what each package includes.

One platform does not mean unlimited usage of every feature—and transparent limits are part of making an informed choice.

What can we responsibly say about Zileo and security?

Security should be discussed in specifics, not slogans.

Zileo’s public marketing website uses React and Node.js rather than PHP. PHP-runtime vulnerabilities therefore do not directly apply to that website’s application code.

That is a statement about architecture, not a promise of immunity. It does not establish the security of every application component, integration or external supplier, and it should not be used to claim that one provider is inherently safer than another.

Any assessment of recruitment software should include questions about access controls, updates, incident response, backups and third-party dependencies—including when assessing Zileo.

No responsible software provider should promise that an incident can never happen.

Thinking about a change? Start with your working day

Some Zileo customers previously used Bullhorn. That does not mean their requirements—or their reasons for choosing Zileo—were all the same.

The sensible starting point is your own team.

Where do consultants lose time? Which subscriptions overlap? Are you paying separately to find a vacancy, identify a contact and send a follow-up? Does candidate sourcing sit in a completely different workflow from business development?

For agencies looking to bring that work together, we recommend Zileo: sourcing, business development, outreach and full CRM/ATS functionality in one platform, without paid feature add-ons.

Bring a live role and a real target market to a demonstration. Look at how you would find candidates, uncover client opportunities, organise outreach and manage your recruitment pipeline in Zileo. Then compare the functionality and total cost with what you use today.

You do not need to make a decision out of frustration. You need a platform that makes the next working day easier.

Explore Zileo’s platform or compare packages and start a free trial—No Card required.

Sources and editorial notes

• Bullhorn incident updates, including its distinction between the cyber incident and PHP vulnerabilities.
• Bullhorn customer incident FAQ, dated 21 October 2026.
• BambooHR security-precaution notice.
• Bullhorn ATS and CRM and pricing.
• BambooHR applicant tracking.

Product names belong to their respective owners. This article is not affiliated with or endorsed by those providers. Product availability and incident information may change.