rewindex

ChangesBox[Medium] Issues with Box Hubs Shared Links

Box: Incident silently edited: [Medium] Issues with Box Hubs Shared Links

Silent editNot classified yetChanged stspg.io (opens in new tab)
Summary

Summary pending. The diff below shows exactly what changed.

Incident page: the full timeline of updates

What changed

Struck in red is what Box removed; blue is what they added. Muted text is unchanged context.

ChangedUpdatepostmortem#1
Before: _Notice and disclaimer: Box is providing this preliminary information subject to further review and analysis. To the best of our knowledge, this is the current state and we may update as more information is confirmed._ Between August 27, 2026 at 11:18 PM PDT…
After: We recently addressed issues affecting Hubs shared-link access in Box. We would like to take the opportunity to further explain these issues and the steps we have taken to keep them from happening in the future. ‌ Between August 27, 2026 at 11:18 PM PDT…
Before: …to resolve the issue by rolling back the change so traffic returned to the previous behavior. ‌ Analysis…
After: …to resolve the issue by rolling back the change, and traffic returned to the previous behavior. ‌ Analysis…
Before: …change, and traffic returned to the previous behavior. We are conducting a full engineering postmortem, including a review of our deployment and configuration practices, to reduce the chance of similar issues in the future. Our overview is subject to change with further analysis and findings. In the event our continuing investigation yields further substantive findings, we may publish additional analysis after the conclusion of the full engineering postmortem. We are continuously working to improve Box and…
After: …change, and traffic returned to the previous behavior. ‌ Analysis During a routine deployment, a configuration change intended exclusively for a pre-production environment was inadvertently applied to the production environment. The incident highlighted opportunities to strengthen deployment-time configuration validation and pre-deployment checks designed to catch environment-specific configuration differences. Corrective Actions Box has initiated the following corrective actions: Improving deployment validation to ensure required environment-specific configuration blocks are present before release. Adding end-to-end checks for shared-link resolution that run as part of pre-release and rollout verification. Enhancing production monitoring and alerts for shared-link failures so regressions are detected and triaged faster. ‌ We are continuously working to improve Box and…

Compared with the previous archived version of this incident (10 to 30-minute polling). View the live incident (opens in new tab).

Archive proof

Rewindex commits each version of an incident it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert. That proves this record existed by then and has not been changed since, by anyone, Rewindex included.

How the archive is checked, and what it cannot prove.

Rewindex captured a newer version after the last checkpoint; the next run () commits it.

History of this incident

TodayTuesday, October 27Tue, Oct 27

1 rewrite

Friday, August 28

1 incident change

All Box changesBox profileMarkdownJSON