KnowBe4 incident

PhishER Showing Incorrect Subject Line for Inbox Messages

Resolved after 4 hours 43 minutes, affecting Inbox, on March 10, 2026.

postmortem May 13, 2026, 05:53 PM UTC

On Tuesday, March 10, 2026, from approximately 15:22 until 20:35 \(UTC\), the EU and US instances of the PhishER console displayed an incorrect subject line for some messages reported with the Phish Alert Button \(PAB\). This incident was caused by a configuration change to the PhishER message ingester service, which unexpectedly affected messages that were reported with some PAB versions. Once we reverted the change and updated the ingester service, PhishER was able to return to normal performance by 20:35 \(UTC\). To prevent this type of issue in the future, we reviewed the ingester service processes and implemented additional testing for messages reported with the PAB. No data loss occurred as a result of this issue.

Started
Mar 10, 2026, 03:48 PM UTC
Resolved
Mar 10, 2026, 08:32 PM UTC
Duration
4h 43m
Detected by Pingoru
Mar 10, 2026, 03:48 PM UTC

Affected components

Inbox

Update timeline

  1. identified Mar 10, 2026, 03:48 PM UTC

    Our development team has identified an issue causing ingested messages in PhishER to display the incorrect sender address.

  2. monitoring Mar 10, 2026, 05:02 PM UTC

    A fix has been implemented and we are monitoring the results.

  3. resolved Mar 10, 2026, 08:32 PM UTC

    This incident has been resolved.

  4. postmortem May 13, 2026, 05:53 PM UTC

    On Tuesday, March 10, 2026, from approximately 15:22 until 20:35 \(UTC\), the EU and US instances of the PhishER console displayed an incorrect subject line for some messages reported with the Phish Alert Button \(PAB\). This incident was caused by a configuration change to the PhishER message ingester service, which unexpectedly affected messages that were reported with some PAB versions. Once we reverted the change and updated the ingester service, PhishER was able to return to normal performance by 20:35 \(UTC\). To prevent this type of issue in the future, we reviewed the ingester service processes and implemented additional testing for messages reported with the PAB. No data loss occurred as a result of this issue.

Your product runs on more than KnowBe4

Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.

Add your stack →