Proofpoint Security Awareness Training incident
Report Suspicious - Disconnect from Threat Intelligence
Resolved after 10 days 5 hours, affecting PhishAlarm - CLEAR - U.S. and PhishAlarm - CLEAR - Europe and 1 more, on August 11, 2026.
We're reprocessing messages that were previously missed due to the connection failure. Customers using CTR may notice an influx of TRO emails.
Affected components
Update timeline
- investigating Aug 11, 2026, 04:11 PM UTC
Customers in the US using Cloud Threat Response are currently failing to connect to threat intelligence for review. Admins will see missing results in the Analyzer report and will not receive TROs during this time. The team is actively investigating this issue.
- monitoring Aug 11, 2026, 06:34 PM UTC
A fix has been implemented and we are monitoring the results.
- monitoring Aug 12, 2026, 05:03 PM UTC
We've confirmed missing TROs and missing events from reports are isolated to US customers using CTR All emails were reported to CTR successfully and actioned as configured All new reported emails are generating a TRO and showing in the report We are currently working on getting the backlog processed from Aug 8 to the 11th and will update once we have an ETA
- monitoring Aug 20, 2026, 10:44 PM UTC
We're reprocessing messages that were previously missed due to the connection failure. Customers using CTR may notice an influx of TRO emails.
- resolved Aug 21, 2026, 09:44 PM UTC
This incident was resolved at 8:00 am Eastern
Your product runs on more than Proofpoint Security Awareness Training
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services