# SentinelOne: Major incident: NA1, NA3, AP1, AP2, AP3, EU1 Partial Outage with Identity Features

**Summary:** SentinelOne reported a major partial outage affecting Identity features in NA1, NA3, AP1, AP2, AP3 and EU1; some AP3 and EU1 customers may have lacked access to Singularity Identity detection and response (IDR). It started at 2025-08-03 17:34 UTC and lasted 4 h 29 min; all services were restored at 2025-08-03 22:04 UTC. _(machine-written, sol)_
- Kind: Major incident · Label: outage (model (Jev))
- Changed: 2025-08-03 17:34 UTC · Detected: 2026-10-17 18:22 UTC
- [Source: https://stspg.io/lwmkv5s4wrt6](https://stspg.io/lwmkv5s4wrt6)
- [Company: SentinelOne](https://rewindex.com/company/sentinelone.md)
- Versions: before (none: first archived) → after incident\_version:317/s3d6c7td62k4@96251837aa34
- Change 1 of 1 for this incident

## What changed

**1. Added: Title**

```diff
+ NA1, NA3, AP1, AP2, AP3, EU1 Partial Outage with Identity Features
```

**2. Added: Impact**

```diff
+ major
```

**3. Added: Status**

```diff
+ resolved
```

**4. Added: Start time**

```diff
+ 2025-08-03 17:34 UTC
```

**5. Added: Resolved time**

```diff
+ 2025-08-03 22:04 UTC
```

**6. Added: Affected components**

```diff
+ Cloud Security - Singapore (AP1), Cloud Security - USA (NA1), Endpoint Security - Germany (EU1), Endpoint Security - India (AP3), Endpoint Security - Singapore (AP1), Endpoint Security - USA (NA1), Germany (EU1), India (AP3), Platform Features - Germany (EU1), Platform Features - India (AP3), Platform Features - Singapore (AP1), Platform Features - USA (NA1), Singapore (AP1), USA (NA1)
```

**7. Added: Update** (investigating) · 2025-08-03 17:34 UTC

```diff
+ We are aware of the ongoing service interruption and are actively investigating the root cause. We apologize for the inconvenience and appreciate your patience as we work to resolve the issue.
```

**8. Added: Update** (investigating) · 2025-08-03 18:58 UTC

```diff
+ We are continuing to investigate this issue.
```

**9. Added: Update** (investigating) · 2025-08-03 18:59 UTC

```diff
+ For Identity customers, as a result of intermittent connectivity issues to the licensing service, customers may be limited in their ability to configure Identity features. We are continuing to investigate this incident. Please note, endpoints continue to be protected by the agent. We have reclassified this as a Sev 1 incident because the Identity service is intermittently affected. Additionally, cloud security components are not affected.
```

**10. Added: Update** (investigating) · 2025-08-03 19:01 UTC

```diff
+ We are continuing to investigate this issue.
```

**11. Added: Update** (investigating) · 2025-08-03 19:02 UTC

```diff
+ We are continuing to investigate this issue.
```

**12. Added: Update** (identified) · 2025-08-03 19:23 UTC

```diff
+ The underlying issue has been identified and our engineering teams are actively working to implement a fix. We will provide updates as we make progress and appreciate your continued patience as we resolve the incident.
```

**13. Added: Update** (identified) · 2025-08-03 19:35 UTC

```diff
+ We are continuing to work on a fix for this issue.
```

**14. Added: Update** (identified) · 2025-08-03 21:11 UTC

```diff
+ We have identified additional regions that may have been impacted by this incident: AP3 and EU1. Some customers in these regions may not have access to Singularity Identity detection and response features (IDR). We are continuing to investigate this issue.
```

**15. Added: Update** (resolved) · 2025-08-03 22:04 UTC

```diff
+ All services have been fully restored and the incident is now resolved. We have validated that all systems are functioning normally. Thank you for your patience throughout this incident.
```

## History of this incident

| When (UTC) | Change | Label |
| --- | --- | --- |
| 2025-08-03 17:34 UTC | Major incident: NA1, NA3, AP1, AP2, AP3, EU1 Partial Outage with Identity Features (this change) | outage |

All SentinelOne changes: [timeline](https://rewindex.com/company/sentinelone/changes.md)
_Diff excerpts are shown on normalized text: dates, counters and tokens appear as ‹date›, ‹count›, ‹tok›; noise-only edits are hidden. Rewindex shows the changed passages, not a copy of the page._


---
Canonical: https://rewindex.com/change/ie8b49bcaad4924 · Markdown: https://rewindex.com/change/ie8b49bcaad4924.md · JSON: https://rewindex.com/api/v1/changes/ie8b49bcaad4924 · Generated 2026-10-18T02:55:19.950Z