Whether you need to report the Zendesk security incident to your Data Protection Supervisory Authority depends on your specific circumstances. Zendesk's customers are the Data Controllers of Service Data, and it is up to each customer to determine if notification is required under GDPR Article 33.
Zendesk will provide all available information to help you make this determination. If your Service Data, including any PII, was compromised, Zendesk has communicated this to you directly.
The 2016 Zendesk security incident involved unauthorized access to certain customer accounts. Specifically, it affected Zendesk Support and Chat products for accounts activated before November 1, 2016. The incident was discovered in 2019, and it…
Zendesk took several actions in response to the 2016 security incident to ensure customer data safety. They engaged external forensic experts to validate the security matter and determine the exact data exposed. Additionally, Zendesk activated…
If your Zendesk account was created before November 1, 2016, and you received a notification from Zendesk, there are several steps you should take. First, if you have any apps installed from the Zendesk Marketplace or private apps that saved…
Zendesk has made significant investments in its security program since the 2016 incident to enhance data protection. While no security measure is 100% effective, Zendesk has implemented additional protections for sensitive personal data and aligned…
For Zendesk accounts affected by the 2016 incident, a password rotation process is being implemented. This applies to agents and end users who have not updated their credentials since November 1, 2016, and are not using Single Sign-On. Upon their…
No, Zendesk accounts created after November 1, 2016, are not affected by the 2016 security incident. Zendesk has found no evidence to suggest that these accounts were compromised. The incident specifically impacted accounts activated before this…
Zendesk has not found evidence that Service Data, including Personally Identifiable Information (PII), was accessed beyond the approximately 15,000 accounts identified. If your account was impacted, Zendesk has specifically notified you and…
The 2016 security incident primarily affected Zendesk Support and Chat products. However, the password rotation being implemented will also impact other products that share authentication with Support, such as Guide, Talk, and Explore. Products…
Zendesk will continue to post updates about the 2016 security incident in their help center article. They plan to share a public post-mortem once the investigation is complete. For more detailed information about Zendesk's security programs, you…