# Upstash: QStash US Region Service Disruption

- Impact (vendor’s label): critical
- Status: postmortem
- Started: 2026-05-08 09:46 UTC · Resolved: 2026-05-08 10:08 UTC · Duration: 22 min
- Updates: 5 · Affected components: QStash - US-EAST-1, US-EAST-1
- [Vendor status page: https://stspg.io/zh00zgv2ks17](https://stspg.io/zh00zgv2ks17)
- [Company: Upstash](https://rewindex.com/company/upstash.md)

## Summary

QStash's US-EAST-1 service suffered a critical disruption starting 2026-05-08 09:46 UTC, lasting 22 min and resolving at 2026-05-08 10:08 UTC. Upstash implemented a fix; its partial postmortem links the incident to a scheduler bug introduced in US East (N. Virginia), triggered when a user with active schedules deleted their account. _(machine-written, sol)_
## Timeline of updates

- **investigating** 2026-05-08 09:46 UTC: We are currently investigating the issue.
- **investigating** 2026-05-08 09:46 UTC: We are continuing to investigate this issue.
- **monitoring** 2026-05-08 10:06 UTC: A fix has been implemented and we are monitoring the results.
- **resolved** 2026-05-08 10:08 UTC: This incident has been resolved, we will publish RCA soon.
- **postmortem** 2026-05-12 08:25 UTC: \*\*Root Cause Analysis\*\*    On \*\*April 24\*\*, we deployed a more optimized scheduler implementation in the \*\*US East \\(N. Virginia\\)\*\* region.   On \*\*May 8\*\*, a user who had active schedules deleted their account.   Under normal behavior, scheduled tasks associated with a deleted account should wake up, detect that the account no longer exists, and exit after performing cleanup. Due to a bug introduced in the new scheduler implementation, this code path did not return early as intended. Execution continued and resulted in a nil pointer dereference.   A second issue then amplified the impact. When a panic occurs in the scheduler, it is designed to be recovered, logged, and isolated so that the process remains healthy. Because of another bug in the panic recovery path, the panic was not properly caught, which caused the worker process handling the scheduled job to terminate.   After that process exited, another worker picked up responsibility for delivering the same scheduled task. Since the same faulty execution path was still present, that worker also failed. This created a cascading failure pattern across workers attempting to process the affected schedules.   \*\*Resolution\*\*   We deployed two fixes: \* Added the missing early return in the deleted-account cleanup path, preventing the nil pointer dereference. \* Corrected the panic recovery logic so that future panics are safely recovered, logged, and reported without causing worker processes to terminate. With these changes in place, the affected execution path is now safe. Even if a future bug triggers a panic in this area, it will be isolated and reported rather than causing process-level failure.

## Rewindex changes for this incident

- 2026-05-08 09:46 UTC: [Critical incident: QStash US Region Service Disruption](https://rewindex.com/change/i3664039ef85470.md)


---
Canonical: https://rewindex.com/company/upstash/incidents/ny2tc6h0mbgy · Markdown: https://rewindex.com/company/upstash/incidents/ny2tc6h0mbgy.md · JSON: https://rewindex.com/api/v1/companies/upstash/incidents/ny2tc6h0mbgy · Generated 2026-10-18T11:44:46.188Z