If your Zendesk account was created before November 1, 2016, and you received a notification from Zendesk, there are several steps you should take. First, if you have any apps installed from the Zendesk Marketplace or private apps that saved authentication credentials, it's recommended to rotate all credentials for those apps.
Additionally, if you uploaded a TLS certificate to Zendesk before November 1, 2016, and it is still valid, you should upload a new certificate and revoke the old one. While there is no indication that other authentication credentials were accessed, you may want to consider rotating them as a precaution.
The 2016 Zendesk security incident involved unauthorized access to certain customer accounts. Specifically, it affected Zendesk Support and Chat products for accounts activated before November 1, 2016. The incident was discovered in 2019, and it…
Zendesk took several actions in response to the 2016 security incident to ensure customer data safety. They engaged external forensic experts to validate the security matter and determine the exact data exposed. Additionally, Zendesk activated…
Zendesk has made significant investments in its security program since the 2016 incident to enhance data protection. While no security measure is 100% effective, Zendesk has implemented additional protections for sensitive personal data and aligned…
For Zendesk accounts affected by the 2016 incident, a password rotation process is being implemented. This applies to agents and end users who have not updated their credentials since November 1, 2016, and are not using Single Sign-On. Upon their…
No, Zendesk accounts created after November 1, 2016, are not affected by the 2016 security incident. Zendesk has found no evidence to suggest that these accounts were compromised. The incident specifically impacted accounts activated before this…
Zendesk has not found evidence that Service Data, including Personally Identifiable Information (PII), was accessed beyond the approximately 15,000 accounts identified. If your account was impacted, Zendesk has specifically notified you and…
The 2016 security incident primarily affected Zendesk Support and Chat products. However, the password rotation being implemented will also impact other products that share authentication with Support, such as Guide, Talk, and Explore. Products…
Whether you need to report the Zendesk security incident to your Data Protection Supervisory Authority depends on your specific circumstances. Zendesk's customers are the Data Controllers of Service Data, and it is up to each customer to determine…
Zendesk will continue to post updates about the 2016 security incident in their help center article. They plan to share a public post-mortem once the investigation is complete. For more detailed information about Zendesk's security programs, you…