BambooHR Temporarily Unavailable: Security Precaution

Update timeline

1. monitoring Oct 21, 2026, 10:46 AM UTC

   We’re aware of PHP2SHELL, a security vulnerability affecting widely used web software, including software used by BambooHR. Our teams are closely monitoring our systems and taking protective measures. If needed, we will temporarily take BambooHR offline as a precaution to protect customer data. We’ll share updates here.

2. monitoring Oct 21, 2026, 11:51 AM UTC

   We are temporarily taking BambooHR offline as a precaution in response to PHP2SHELL, a critical security vulnerability affecting widely used web software across many organizations. The security of your data is our top priority. Our Engineering and Security teams have been monitoring our systems throughout the night and are working to address the vulnerability and restore access safely. We know this interrupts essential work, including payroll, and we’re sorry for the disruption. We do not yet have a confirmed restoration time. We will continue sharing updates here.

3. monitoring Oct 21, 2026, 03:03 PM UTC

   We have applied the recommended security fix and are now testing affected systems to verify that we can safely restore access. BambooHR remains temporarily unavailable while this work continues. The security of your data remains our top priority. Thank you for your patience as we work to restore access safely.

4. monitoring Oct 21, 2026, 04:01 PM UTC

   Initial tests of the security patches have passed. We are now validating that affected features and services are working correctly before restoring access. The security of your data remains our top priority. Thank you for your continued patience as we work to bring BambooHR back online safely.

5. monitoring Oct 21, 2026, 05:31 PM UTC

   Testing of the security patches is progressing as expected. Our teams continue validating features and services affected by this vulnerability before restoring access. Thank you for your continued patience as we work to restore service safely.