Ιστορικό διακοπών του Expel

1. 30 Αυγούστου 2026 στις 9:43 π.μ. UTCidentified

   Τα email από το Workbench καθυστερούν από τις 12 π.μ. UTC. Αναγνωρίσαμε τη βασική αιτία και εργαζόμαστε για την αποκατάσταση. Οι απαντήσεις έκβαση Phishing, ειδοποιήσεις email χρήστη, και οι ειδοποιήσεις Ticketing του Org-Level καθυστερούν από τις 12 πμ UTC. Οι λειτουργίες SOC και η κατάποση σε εγρήγορση δεν επηρεάζονται. Θα παρέχουμε μια νέα ενημέρωση μέχρι τις 12:30μμ UTC

2. 30 Αυγούστου 2026 στις 11:10 π.μ. UTCidentified

   Έχουμε εντοπίσει ότι η αιτία συνεχίζει να εργάζεται για την αποκατάσταση. Επιβεβαιώσαμε επίσης ότι λόγω αυτού του ζητήματος, όταν κάποιος υποβάλλει ένα ύποπτο phishing email, το email δεν θα φτάσει στο Workbench για αναθεώρηση. Επόμενη ενημέρωση στις 1μμ UTC.

3. 30 Αυγούστου 2026 στις 12:58 μ.μ. UTCidentified

   Συνεχίζουμε να εργαζόμαστε για την αποκατάσταση. Οι υπηρεσίες MDR δεν επηρεάζονται. Η κατάποση, η ανίχνευση και η έρευνα λειτουργούν κανονικά. Οι ειδοποιήσεις Slack, Microsoft Teams, PagerDuty, Opsgenie και Service Now εξακολουθούν να παρέχονται. Αποστολή με email από το Workbench παραμένει μη διαθέσιμη. Δεν απαιτείται καμία ενέργεια αυτή τη στιγμή; θα επιβεβαιώσουμε τα βήματα εκ νέου υποβολής για υποβολές phishing μόλις αποκατασταθεί η υπηρεσία. Επόμενη ενημέρωση: Δευτέρα, 31 Αυγούστου στις 13:00 UTC (9:00 πμ ET)

4. 30 Αυγούστου 2026 στις 6:14 μ.μ. UTCmonitoring

   Η αποστολή ηλεκτρονικού ταχυδρομείου από το Workbench λειτουργεί τώρα και τα email στην ουρά αναπαράγονται. Μια ενημέρωση θα δημοσιευθεί μόλις ολοκληρωθεί η επανάληψη.

5. 30 Αυγούστου 2026 στις 7:53 μ.μ. UTCresolved

   Το θέμα αυτό έχει επιλυθεί. Αποστολή ηλεκτρονικού ταχυδρομείου από το Workbench έχει αποκατασταθεί, και phishing υποβολές ηλεκτρονικού ταχυδρομείου είναι επεξεργασία κανονικά. Ύποπτα μηνύματα ηλεκτρονικού ταχυδρομείου phishing που υποβλήθηκαν κατά τη διάρκεια αυτής της περιόδου δεν ελήφθησαν από την Expel και δεν ήταν δυνατόν να υποβληθούν σε επεξεργασία. Παρακαλώ ζητήστε από τους χρήστες σας να υποβάλουν ξανά οτιδήποτε ανέφεραν κατά τη διάρκεια αυτής της περιόδου. Τα μηνύματα επικοινωνίας που δημιουργήθηκαν κατά τη διάρκεια αυτής της περιόδου έχουν παραδοθεί. Μερικοί μπορεί να φτάσουν αργότερα από τη χρονοσφραγίδα που είχαν αρχικά δημιουργηθεί.

Αυτόματη μετάφραση από την επίσημη ενημέρωση του συμβάντος.

1. 17 Ιουλίου 2026 στις 2:21 π.μ. UTCinvestigating

   Στις 9:58μμ EDT, αρχίσαμε να αντιμετωπίζουμε ένα πρόβλημα με τη βάση δεδομένων Workbench που εμποδίζει τους χρήστες να έχουν πρόσβαση στο Workbench. Θα σας ενημερώσουμε μέχρι τις 11μμ EDT.

2. 17 Ιουλίου 2026 στις 2:34 π.μ. UTCmonitoring

   Εφαρμόσαμε μια λύση και πιστεύουμε ότι το περιστατικό θα λυθεί. Παρακολουθούμε την υγεία των υποδομών και θα το επιλύσουμε αυτό εάν δεν υπάρχουν εκκρεμή ζητήματα. Παρακαλώ ενημερώστε μας αν αντιμετωπίζετε προβλήματα.

3. 17 Ιουλίου 2026 στις 3:01 π.μ. UTCresolved

   Το περιστατικό έχει επιλυθεί και όλα τα συστήματα είναι ξανά πλήρως διαθέσιμα. Δεν χάθηκαν δεδομένα πελατών· οι λειτουργίες SOC επηρεάστηκαν, αλλά επέστρεψαν στο φυσιολογικό.

Αυτόματη μετάφραση από την επίσημη ενημέρωση του συμβάντος.

1. 13 Ιουλίου 2026 στις 8:20 μ.μ. UTCinvestigating

   Στις 18 Ιουνίου, έγινε μια αλλαγή στο περιβάλλον της Expel που ακούσια εισήγαγε τη λογική που σιωπηρά ευρετηρίαζε τις ειδοποιήσεις των προμηθευτών. Η αλλαγή αυτή επανήλθε με σκοπό την αποκατάσταση της συναγερμού μόλις εντοπίστηκε την 1η Ιουλίου. Η ομάδα μας έχει εντοπίσει αρκετές ειδοποιήσεις που συνέβησαν κατά τη διάρκεια της περιόδου των υπηρεσιών με αντίκτυπο μέσα σε μια σειρά από περιβάλλοντα πελατών που αναπαράγουμε. Εάν τυχόν περιστατικά εμφανιστούν, οι επιρρεπείς πελάτες θα ειδοποιηθούν μέσω του Workbench. Εν τω μεταξύ παρακαλώ μην διστάσετε να επικοινωνήσετε με την ομάδα μας με οποιεσδήποτε ερωτήσεις.

2. 12 Αυγούστου 2026 στις 5:47 μ.μ. UTCresolved

   This incident has been resolved.

Αυτόματη μετάφραση από την επίσημη ενημέρωση του συμβάντος.

1. 18 Ιουνίου 2026 στις 8:37 μ.μ. UTCinvestigating

   At 2pm ET, we began experiencing a problem with our notification system that is causing notification delays to our customers. We will provide an update by 5pm ET.

2. 18 Ιουνίου 2026 στις 9:05 μ.μ. UTCidentified

   We've identified the cause of the delayed notifications as an issue with a third-party notification vendor. A fix is currently being applied. Workbench notifications have been delayed since 19:09 UTC, and we'll provide another update at 21:30 UTC.

3. 18 Ιουνίου 2026 στις 9:35 μ.μ. UTCidentified

   Workbench notifications continue to be delayed since 19:09 UTC due to an issue with a third-party notification vendor. They are working on a fix. All delayed notifications will be processed once the outage is resolved. Next update 22:00 UTC

4. 18 Ιουνίου 2026 στις 10:13 μ.μ. UTCmonitoring

   The cause of the notification delays has been resolved and we are observing delayed messages being delivered. All delayed notifications will be processed and we will continue to monitor.

5. 18 Ιουνίου 2026 στις 11:28 μ.μ. UTCresolved

   All delayed messages have been delivered and the notifications system is fully operational.

1. 17 Ιουνίου 2026 στις 11:11 μ.μ. UTCinvestigating

   We are investigating an issue affecting the processing of phishing submissions. Beginning at 19:47 UTC, phishing submissions are not being processed, which is preventing the creation of Phishing Expel Alerts. Suspected phishing emails submitted for review during this period may not yet be analyzed. Our team is actively working to identify the cause. We will provide an update by 00:00 UTC.

2. 18 Ιουνίου 2026 στις 12:07 π.μ. UTCinvestigating

   We are continuing to investigate this issue

3. 18 Ιουνίου 2026 στις 12:59 π.μ. UTCinvestigating

   We are continuing to investigate this issue. Will post another update in 60 minutes.

4. 18 Ιουνίου 2026 στις 2:12 π.μ. UTCinvestigating

   We think we have identified the problem and are working on a resolution right now. Will update again in 60 minutes.

5. 18 Ιουνίου 2026 στις 3:17 π.μ. UTCinvestigating

   Beginning at 19:47 UTC, phishing submissions are not being processed, which is preventing the creation of Phishing Expel Alerts. Suspected phishing emails submitted for review during this period may not yet be analyzed. We've identified the cause and we are working with the vendor to address the issue. We expect to retrieve and process them once service is restored.

6. 18 Ιουνίου 2026 στις 1:29 μ.μ. UTCresolved

   This incident has been resolved.

1. 17 Ιουνίου 2026 στις 4:16 μ.μ. UTCinvestigating

   At 10am ET, we began experiencing a problem with alert ingestion for some AWS Cloudtrail devices. We will provide an update by 1pm ET.

2. 17 Ιουνίου 2026 στις 4:37 μ.μ. UTCmonitoring

   A fix has been implemented and we are monitoring the results.

3. 17 Ιουνίου 2026 στις 4:59 μ.μ. UTCresolved

   This incident has been resolved.

1. 9 Ιουνίου 2026 στις 3:40 μ.μ. UTCinvestigating

   Workbench is currently experiencing connectivity issues and may be inaccessible for some users. We are investigating the issue and will provide an update within an hour.

2. 9 Ιουνίου 2026 στις 4:42 μ.μ. UTCinvestigating

   Workbench is still experiencing connectivity issues. We are still investigating the issue and will provide an update in 1 hour.

3. 9 Ιουνίου 2026 στις 5:22 μ.μ. UTCmonitoring

   We have identified the issue, have rolled out a fix and are monitoring the situation.

4. 9 Ιουνίου 2026 στις 5:24 μ.μ. UTCmonitoring

   We are continuing to monitor for any further issues.

5. 9 Ιουνίου 2026 στις 5:33 μ.μ. UTCresolved

   This incident has been resolved.

1. 13 Μαΐου 2026 στις 4:23 μ.μ. UTCidentified

   We are aware of an issue with the Expel Alerts count being inflated for customers. We have identified the root cause and are working on a remediation. SOC operations and alert ingestion are not affected. We will provide another update by 1pm EDT.

2. 13 Μαΐου 2026 στις 4:38 μ.μ. UTCidentified

   We have remediated the issue with Expel Alerts count being inflated for customers by shifting to a different source of statistics. We are working on fixing the underlying issue with our main source of count data. We will provide another update by 1pm EDT.

3. 13 Μαΐου 2026 στις 4:46 μ.μ. UTCresolved

   The incident has been resolved, and all alerts counts are once again accurate. No customer data was lost, and SOC operations were not impacted.

1. 1 Μαΐου 2026 στις 6:50 μ.μ. UTCinvestigating

   At 2pm EDT, we began experiencing a problem with the customer device secrets service that is preventing our infrastructure from accessing customer security devices. We will provide an update by 3:30pm EDT.

2. 1 Μαΐου 2026 στις 7:09 μ.μ. UTCmonitoring

   We have implemented a fix and believe the incident to be resolved. We are seeing customer security devices returning to healthy status. We are monitoring the health of the infrastructure and will post another update by 4pm EDT.

3. 1 Μαΐου 2026 στις 8:01 μ.μ. UTCresolved

   The incident has been resolved, and all systems are once again fully available. No customer data was lost, and all previously-accessible security devices are once again accessible and ingesting alerts.

1. 25 Απριλίου 2026 στις 5:42 μ.μ. UTCinvestigating

   At 1pm ET, we began experiencing a problem with our notification system that is causing notification delays to our customers.  We will provide an update by 2:30pm ET.

2. 25 Απριλίου 2026 στις 6:09 μ.μ. UTCresolved

   This issue has been resolved. All notifications in the backlog have been delivered and new notifications are being delivered as normal.

1. 20 Απριλίου 2026 στις 4:20 μ.μ. UTCinvestigating

   At 10:59AM EDT, we noticed that a set of devices have been unhealthy since last week due to invalid credentials. We believe the cause to be a change to our device credentials storage subsystem. We are working to identify the specific set of devices and restore the credentials. Once restored, all delayed alerts will be ingested. We will provide an updated by 1pm EDT.

2. 20 Απριλίου 2026 στις 5:00 μ.μ. UTCinvestigating

   We have identified the specific subset of devices that are affected and are working on restoring the credentials for those devices. Once restored, all alerts that have not been ingested for these devices will be ingested. We will provide another update by 1:30pm EDT.

3. 20 Απριλίου 2026 στις 5:35 μ.μ. UTCinvestigating

   We have identified the specific subset of devices that are affected and are working on restoring the credentials for those devices. Once restored, all alerts that have not been ingested for these devices will be ingested. We will provide another update by 2:00pm EDT.

4. 20 Απριλίου 2026 στις 6:01 μ.μ. UTCinvestigating

   We have identified the specific subset of devices that are affected and are working on restoring the credentials for those devices. Once restored, all alerts that have not been ingested for these devices will be ingested. We will provide another update by 2:30pm EDT.

5. 20 Απριλίου 2026 στις 6:34 μ.μ. UTCidentified

   We have restored the credentials for the affected subset of devices. We are monitoring closely to ensure proper ingestion of delayed alerts. We will provide another update by 3:00pm EDT.

6. 20 Απριλίου 2026 στις 7:02 μ.μ. UTCidentified

   We have restored the credentials for the subset of devices. We are monitoring closely to ensure proper ingestion of delayed alerts. We will provide another update by 3:30pm EDT.

7. 20 Απριλίου 2026 στις 7:34 μ.μ. UTCmonitoring

   We restored the credentials for the subset of devices, and are seeing that the majority of devices have returned to a healthy state. We are investigating the remaining unhealthy devices, which do not seem related to the credentials. We will provide another update by 4:00pm EDT.

8. 20 Απριλίου 2026 στις 8:01 μ.μ. UTCmonitoring

   We restored the credentials for the subset of devices, and are seeing that the majority of devices have returned to a healthy state. We are investigating the remaining unhealthy devices, which do not seem related to credentials. We will provide another update by 4:30pm EDT.

9. 20 Απριλίου 2026 στις 8:54 μ.μ. UTCresolved

   We restored the credentials for the subset of devices, and are seeing that the majority of devices have returned to a healthy state. We investigated the remaining unhealthy devices, which are not related to the customer secrets vault upgrade. This incident is resolved.

1. 24 Μαρτίου 2026 στις 4:58 μ.μ. UTCinvestigating

   Notifications are currently not being delivered to Microsoft Teams since 4pm UTC. We are actively investigating to determine and address the root cause. We advise you login to Workbench for timely updates and/or to engage with Expel's SOC until the issue is resolved. Updates will be shared as soon as they are available. We will provide an update by 5:30pm UTC.

2. 24 Μαρτίου 2026 στις 5:49 μ.μ. UTCidentified

   Update: We have confirmed there are no technical issues with Workbench or with our third party systems that support notifications. Microsoft has since updated its Teams service health to indicate they are investigating a possible issue. We recommend you check your MSFT 365 service health and Microsoft's status page for updates: https://status.cloud.microsoft/m365/referrer=serviceStatusRedirect Until further notice, please continue to login to Workbench for timely updates and/or to engage with Expel's SOC. We will provide notice when Workbench notifications to Teams are operational.

3. 24 Μαρτίου 2026 στις 9:02 μ.μ. UTCmonitoring

   Update: We are observing a broad recovery in MS Teams message delivery as of 19:10 UTC. However, Microsoft has confirmed that service remains degraded for some users in the West United States region due to ongoing infrastructure optimizations. We are continuing to monitor the situation. Any messages delayed during this incident are being automatically reprocessed for delivery.

4. 24 Μαρτίου 2026 στις 9:12 μ.μ. UTCresolved

   Resolved: Microsoft has confirmed that the issues affecting Teams bots and message delivery are now fully resolved. All delayed messages have been reprocessed and delivered. Service is operating normally.

1. 2 Μαρτίου 2026 στις 6:35 μ.μ. UTCmonitoring

   We are currently monitoring an outage affecting the AWS GuardDuty service. As a result of this outage, our integration with AWS GuardDuty is currently reporting as unhealthy. We will provide an update within 60 minutes, or as soon as more information is available.

2. 2 Μαρτίου 2026 στις 7:36 μ.μ. UTCmonitoring

   We are working on a workaround that will bypass the faulty AWS region in order resume alert ingestion from healthy regions. Once the outage in the faulty region is over, we will resume ingestion in that region. We will provide an update within 60 minutes, or as soon as more information is available.

3. 2 Μαρτίου 2026 στις 8:36 μ.μ. UTCresolved

   Workaround is in place, we are bypassing the faulty AWS region and all impacted devices have resumed ingestion. Once the outage in the faulty region is over, we will resume ingestion in that region. Alert Ingestion issue resolved.

1. 2 Φεβρουαρίου 2026 στις 9:00 μ.μ. UTCinvestigating

   Expel is investigating an issue with Workbench notifications that may be preventing users from receiving outbound notifications from Workbench to User Email, Email Ticketing, Slack, MS Teams, PagerDuty, and OpsGenie integrations since 19:30 UTC. We will provide an update by 21:30 UTC.

2. 2 Φεβρουαρίου 2026 στις 9:15 μ.μ. UTCidentified

   We have identified the root cause as an issue with a 3rd party vendor. They are actively working on resolving the issue. We have confirmed that outbound notifications from Workbench have not been delivered to to User Email, Email Ticketing, Slack, MS Teams, PagerDuty, and OpsGenie since 19:30 UTC. These notifications are queued and will be re-sent when the issue is resolved. Alert ingestion is not affected. We will provide another update by 21:30 UTC.

3. 2 Φεβρουαρίου 2026 στις 9:41 μ.μ. UTCidentified

   Outbound notifications from Workbench to User Email, Email Ticketing, Slack, MS Teams, PagerDuty, and OpsGenie continue to be delayed. We will provide an update by 22:00 UTC.

4. 2 Φεβρουαρίου 2026 στις 10:00 μ.μ. UTCidentified

   Outbound notifications from Workbench to User Email, Email Ticketing, Slack, MS Teams, PagerDuty, and OpsGenie continue to be delayed. We will provide an update by 22:30 UTC.

5. 2 Φεβρουαρίου 2026 στις 10:12 μ.μ. UTCmonitoring

   We are observing that delayed messages are starting to be delivered. We will monitor the backlog of delayed notifications and the health of the system. We will provide an update by 22:30 UTC.

6. 2 Φεβρουαρίου 2026 στις 10:33 μ.μ. UTCresolved

   The incident has been resolved, and all delayed notifications have been delivered. No customer data was lost, and SOC operations were not impacted.

1. 20 Ιανουαρίου 2026 στις 8:31 μ.μ. UTCinvestigating

   At 3:00pm ET, we began experiencing a problem with alert ingestion. We will provide an update by 4:30pm ET.

2. 20 Ιανουαρίου 2026 στις 8:54 μ.μ. UTCmonitoring

   A fix has been implemented and we are monitoring the results.

3. 20 Ιανουαρίου 2026 στις 11:02 μ.μ. UTCresolved

   This incident has been resolved.

1. 7 Ιανουαρίου 2026 στις 7:51 μ.μ. UTCinvestigating

   Starting 1/6/25 at roughly 12:00 EST, we have identified an issue with our phishing service where outcome emails are being sent multiple times to some users and are investigating the root cause. Ingestion and email review are not affected. We will provide an update at 4pm EST.

2. 7 Ιανουαρίου 2026 στις 9:11 μ.μ. UTCidentified

   We believe we have identified the root cause of duplicate phishing outcome emails and are preparing a hotfix. Next update at 5pm EST.

3. 7 Ιανουαρίου 2026 στις 10:00 μ.μ. UTCmonitoring

   The hotfix for duplicate phishing outcomes has been deployed and we are monitoring. Next update at 6pm EST.

4. 7 Ιανουαρίου 2026 στις 10:54 μ.μ. UTCresolved

   The hotfix for phishing submission outcome emails was successful and behavior has returned to normal. This incident is resolved.

1. 29 Δεκεμβρίου 2025 στις 9:26 μ.μ. UTCinvestigating

   At 3:17, we began experiencing a problem with enrichment service that is impacting detections. We will provide an update by 4:45.

2. 29 Δεκεμβρίου 2025 στις 9:49 μ.μ. UTCmonitoring

   We have identified and implemented a fix and are monitoring; service queues are approaching normal.

3. 29 Δεκεμβρίου 2025 στις 10:09 μ.μ. UTCresolved

   Detection pipelines are caught up. Service is nominal.

1. 18 Νοεμβρίου 2025 στις 3:34 μ.μ. UTCidentified

   Workbench cannot currently deliver notifications to Microsoft Teams. The issue began around 9:45am ET. Expel is actively investigating the issue to determine if it is related to the larger Cloudflare outage. We recommend you utilize email notifications in the interim, and can confirm communicating with Expel personnel via Microsoft Teams still works. The issue is specific to Workbench notifications.

2. 18 Νοεμβρίου 2025 στις 3:50 μ.μ. UTCmonitoring

   The underlying issue has been resolved We are monitoring the health of the infrastructure and will resolve this if there are no outstanding issues. Please let us know if you are experiencing any problems.

3. 19 Νοεμβρίου 2025 στις 6:17 μ.μ. UTCresolved

   This incident has been resolved.

1. 12 Νοεμβρίου 2025 στις 3:28 μ.μ. UTCidentified

   We’re upgrading our API connection and that may impact delivery of some alerts to Workbench. We are actively investigating and collaborating on a solution to ensure the consistent and complete delivery of all alert data. Please reach out to Orca if you’d like additional information. Thank you for your patience and understanding as we work through this.

2. 17 Απριλίου 2026 στις 1:52 μ.μ. UTCresolved

   This incident has been resolved.

1. 3 Νοεμβρίου 2025 στις 4:56 μ.μ. UTCinvestigating

   At 10:50am ET, we began experiencing a problem with pivoting to Wiz console that resulting in some degraded analyst triage experience. We will provide an update by 12:50pm ET.

2. 3 Νοεμβρίου 2025 στις 5:50 μ.μ. UTCinvestigating

   We have reached out to Wiz and waiting to hear back. We will provide an update by 1:50pm ET.

3. 3 Νοεμβρίου 2025 στις 6:55 μ.μ. UTCmonitoring

   Analysts are starting to successfully SSO into the Wiz console. We will continue to monitor the situation. We will provide an update by 3:00pm ET.

4. 3 Νοεμβρίου 2025 στις 7:43 μ.μ. UTCresolved

   Analysts are able to successfully SSO into the Wiz console. Incident is closed.