Un-requested Password Reset Emails - BrandShelter Portal

Summary

Un-requested Password Reset Emails - BrandShelter Portal

Our investigations identified an error in the platform which caused the issue. The issue has been fixed and the Password Reset functionality is now fully restored after being temporarily disabled as a precaution. Please note, it is not mandatory for users to reset their current passwords as there was no data breach. We can confirm that the platform, accounts, or data have not been compromised as a result of this issue.

• Started

  Jul 12, 2024 · 12:45 AM

• Resolved

  Jul 12, 2024 · 12:56 PM

• Duration

  12h 11m

• Severity

  None

• ◐

  Investigating

  Jul 12 · 12:45 AM BrandShelter

  It has come to our attention that our system may have sent out password reset requests to many clients & users of our platform - we can confirm that the platform has encountered an error which caused this & at no point do we believe the platform or accounts have been compromised. We will update this status as soon as we can confirm a fix has been deployed to prevent such unintentional system messaging / password resets in future. The next update will be provided by 03:00AM UTC. We apologise for any inconvenience caused during this time.

• ◐

  Investigating

  Jul 12 · 2:41 AM BrandShelter

  The Platform Team are continuing to investigate the situation however as an interim measure, they have now disabled the Password Reset function whilst the investigation continues. The next update will be provided by 05:00AM UTC We apologise for any inconvenience caused during this time.

• ◐

  Investigating

  Jul 12 · 5:18 AM BrandShelter

  The Platform Team are continuing to investigate the root cause of the issue. The Password Reset functionality will remain disabled until such a time the team can identify and resolve the issue. The next update will be provided at 07:00AM UTC We apologise for any inconvenience caused during this time.

• ◐

  Investigating

  Jul 12 · 7:02 AM BrandShelter

  The Platform Team are continuing the investigation at this time. The Password Reset functionality remains disabled until further notice. The next update will be provided at 09:00AM UTC. We apologise for any inconvenience caused during this time and thank you for your patience and understanding.

• ◐

  Investigating

  Jul 12 · 9:09 AM BrandShelter

  The investigation is still ongoing. While the cause of the issue is yet to be determined, we can confirm that no data was compromised or exposed. We appreciate your patience and will update the status post when more information is available

• ◐

  Investigating

  Jul 12 · 12:55 PM BrandShelter

  We are continuing to investigate this issue.

• ✓

  Resolved

  Jul 12 · 12:56 PM BrandShelter

  Our investigations identified an error in the platform which caused the issue. The issue has been fixed and the Password Reset functionality is now fully restored after being temporarily disabled as a precaution. Please note, it is not mandatory for users to reset their current passwords as there was no data breach. We can confirm that the platform, accounts, or data have not been compromised as a result of this issue.