# Keeper: Critical incident: Vault Login in GovCloud (US_GOV) Region

**Summary:** Keeper reported a critical incident affecting vault login in GovCloud (US\_GOV), starting at 2023-12-19 00:03 UTC and resolved at 2023-12-19 00:14 UTC, lasting 11 min. The vendor linked login errors to a recent backend app update and restored services by reverting it in GovCloud. _(machine-written, sol)_
- Kind: Major incident · Label: outage (model (Jev))
- Changed: 2023-12-19 00:03 UTC · Detected: 2026-10-17 18:22 UTC
- [Source: https://stspg.io/xhmgnqshl23j](https://stspg.io/xhmgnqshl23j)
- [Company: Keeper](https://rewindex.com/company/keeper.md)
- Versions: before (none: first archived) → after incident\_version:311/vlym33lv8wll@9b065d92ef43
- Change 1 of 1 for this incident

## What changed

**1. Added: Title**

```diff
+ Vault Login in GovCloud (US_GOV) Region
```

**2. Added: Impact**

```diff
+ critical
```

**3. Added: Status**

```diff
+ resolved
```

**4. Added: Start time**

```diff
+ 2023-12-19 00:03 UTC
```

**5. Added: Resolved time**

```diff
+ 2023-12-19 00:14 UTC
```

**6. Added: Affected components**

```diff
+ Keeper Admin Console (GovCloud), Keeper Infrastructure (GovCloud) - Keeper Admin Console (GovCloud), Keeper Infrastructure (GovCloud) - Keeper Web Vault (GovCloud), Keeper Web Vault (GovCloud)
```

**7. Added: Update** (identified) · 2023-12-19 00:03 UTC

```diff
+ We are aware of vault login errors in the US_GOV region. Keeper DevOps team is investigating the issue related to a recent backend app update.
```

**8. Added: Update** (resolved) · 2023-12-19 00:14 UTC

```diff
+ The issue has been resolved. We have reverted the backend update in GovCloud and services are restored.
```

## History of this incident

| When (UTC) | Change | Label |
| --- | --- | --- |
| 2023-12-19 00:03 UTC | Critical incident: Vault Login in GovCloud (US\_GOV) Region (this change) | outage |

All Keeper changes: [timeline](https://rewindex.com/company/keeper/changes.md)
_Diff excerpts are shown on normalized text: dates, counters and tokens appear as ‹date›, ‹count›, ‹tok›; noise-only edits are hidden. Rewindex shows the changed passages, not a copy of the page._


---
Canonical: https://rewindex.com/change/ia0b7ee984db026 · Markdown: https://rewindex.com/change/ia0b7ee984db026.md · JSON: https://rewindex.com/api/v1/changes/ia0b7ee984db026 · Generated 2026-10-18T01:30:06.753Z