Zendesk has not found evidence that Service Data, including Personally Identifiable Information (PII), was accessed beyond the approximately 15,000 accounts identified. If your account was impacted, Zendesk has specifically notified you and provided steps to safeguard your data.
The investigation is ongoing, and Zendesk is committed to transparency and will continue to update affected customers with any new findings. If you have not been contacted by Zendesk, it is likely that your Service Data was not compromised.
The 2016 Zendesk security incident involved unauthorized access to certain customer accounts. Specifically, it affected Zendesk Support and Chat products for accounts activated before November 1, 2016. The incident was discovered in 2019, and it…
Zendesk took several actions in response to the 2016 security incident to ensure customer data safety. They engaged external forensic experts to validate the security matter and determine the exact data exposed. Additionally, Zendesk activated…
If your Zendesk account was created before November 1, 2016, and you received a notification from Zendesk, there are several steps you should take. First, if you have any apps installed from the Zendesk Marketplace or private apps that saved…
Zendesk has made significant investments in its security program since the 2016 incident to enhance data protection. While no security measure is 100% effective, Zendesk has implemented additional protections for sensitive personal data and aligned…
For Zendesk accounts affected by the 2016 incident, a password rotation process is being implemented. This applies to agents and end users who have not updated their credentials since November 1, 2016, and are not using Single Sign-On. Upon their…
No, Zendesk accounts created after November 1, 2016, are not affected by the 2016 security incident. Zendesk has found no evidence to suggest that these accounts were compromised. The incident specifically impacted accounts activated before this…
The 2016 security incident primarily affected Zendesk Support and Chat products. However, the password rotation being implemented will also impact other products that share authentication with Support, such as Guide, Talk, and Explore. Products…
Whether you need to report the Zendesk security incident to your Data Protection Supervisory Authority depends on your specific circumstances. Zendesk's customers are the Data Controllers of Service Data, and it is up to each customer to determine…
Zendesk will continue to post updates about the 2016 security incident in their help center article. They plan to share a public post-mortem once the investigation is complete. For more detailed information about Zendesk's security programs, you…