Buildkite: Credential stuffing attack
Timeline of updates
- resolved
We’ve seen no further suspicious activity, and have rolled out additional measures to prevent similar attacks in the future. In light of the attack, we’re working on improvements to our documentation and platform to help you keep your Buildkite account secure. We’ll be posting these to the Buildkite Changelog as they’re released. If you have any questions please contact support@buildkite.com
From Buildkite’s published incident history: for incidents before Rewindex began polling this status page, only the final update text is available.
Archive proof
Rewindex commits each version of an incident it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert.
How the archive is checked, and what it cannot prove.
This incident predates live tracking (October 17, 2026). It came from the vendor’s own published history, which is not covered by checkpoints.
Impact, status and times are the vendor’s own, as last archived. View on www.buildkitestatus.com (opens in new tab).
Cite this
Status incident (vendor impact label: none) posted by Buildkite, started 2019-05-26 07:40 UTC, resolved after 3 d, 1 update(s).
- Title
- Credential stuffing attack
- Vendor
- Buildkite
- Date
- URL
- https://rewindex.com/company/buildkite/incidents/z4dn9qzvzt93
Buildkite profileRecent Buildkite incidentsAll outages on May 26, 2019Buildkite in May 2019MarkdownJSON