Is Kudelski Security Down?

Dear Customer, We would like to provide a final update regarding the Microsoft Sentinel service issue affecting the East US region. Issue Summary Between 10:00 UTC and 19:35 UTC on 22 September 2026, Microsoft Sentinel experienced a platform-related issue that caused intermittent failures or delays when accessing Entity Pages and Automation Service operations. Root Cause Microsoft's investigation determined that elevated request volume from a workload increased pressure on backend services, resulting in request throttling and intermittent failures for affected customers. Resolution Microsoft implemented several mitigation measures, including request volume management and concurrency limit adjustments, to reduce service pressure and restore normal operations. After monitoring the environment to validate recovery, Microsoft confirmed that service functionality was fully restored at 19:35 UTC on 22 September 2026. Thank you for your patience and understanding throughout this matter. North America: 1-866-929-3528 EMEA: +41 58 317 77 77 Kind regards, The Cyber Fusion Center --- [2026-09-22T15:31:22.941Z] (identified) Microsoft has confirmed that the issue is related to elevated query volume and concurrency from one or more workspaces, which has resulted in backend throttling and intermittent failures of certain automation-related operations. They are actively investigating the issue and implementing mitigation measures while closely monitoring service availability. --- [2026-09-22T12:55:41.987Z] (identified) Affected Service: Microsoft Sentinel Region: East US Impact: Customers using Microsoft Sentinel in the East US region may experience intermittent failures or delays when accessing Entity Pages and Automation Service operations. Start Time: 22 September 2026, 10:37 UTC Current Status: Microsoft has identified an increase in failed service requests affecting Microsoft Sentinel in East US. Initial investigation indicates the issue is related to elevated query volume and concurrency from one or more workspaces, resulting in backend throttling. Consequently, some automation-related operations may fail intermittently. Next Update: Microsoft will provide the next update within 60 minutes or sooner if significant developments occur. Microsoft is actively investigating the issue and monitoring service health to determine the root cause and mitigation steps. Thank you for your patience and understanding throughout this matter. North America: 1-866-929-3528 EMEA: +41 58 317 77 77 Kind regards, The Cyber Fusion Center

Dear Valued Client, The issue affecting has been fully resolved and all remediation activities are now complete. All events have been successfully replayed, our security analysts have completed the review of the delayed events and any incidents requiring attention have been escalated. We remain committed to maintaining the highest standards of security monitoring and incident response. Should you have any questions regarding this incident or the cases that were opened, our support team is available to assist you. Thank you for your patience and understanding throughout this matter. North America: 1-866-929-3528 EMEA: +41 58 317 77 77 Kind regards, The Cyber Fusion Center --- [2026-08-26T09:31:55.039Z] (monitoring) Dear Valued Client, We are pleased to inform you that the database issue affecting our Cyber Fusion Center has been successfully resolved. All systems are now operating normally. Our team will now replay the events that were blocked during the database outage. Our security analysts will prioritize the review of the events that were delayed to ensure comprehensive coverage and prevent any potential incidents from being missed. We appreciate your patience and understanding during this incident. Should you have any questions or concerns, please do not hesitate to contact our support team. North America: 1-866-929-3528 EMEA: +41 58 317 77 77 Kind regards, The Cyber Fusion Center --- [2026-08-26T08:41:30.711Z] (identified) Dear Valued Client, The Kudelski Security Cyber Fusion Center experienced a service degradation due to a Database issue, resulting in delays in the processing of security events for Clients having a Data Location in Switzerland. Our team is currently working on the problem and will release the delayed events. Our teams are actively monitoring the situation and working to ensure all events are processed as quickly as possible. We will provide further updates as they become available. Would you need further assistance, please ask the Cyber Fusion Center by using the MSS Portal or by phone: North America: 1-866-929-3528 EMEA: +41 58 317 77 77 Kind regards, The Cyber Fusion Center

Dear Valued Client, The Kudelski Security Cyber Fusion Center has resolved the service degradation performance incident. For further assistance, please contact the Cyber Fusion Center through the MSS Client Portal or by phone: North America: 1-866-929-3528 EMEA: +41 58 317 77 77 --- [2026-07-07T07:38:23.199Z] (monitoring) Dear Valued Client, The Kudelski Security Cyber Fusion Center has remediated the impact of the incident as of 0655h UTC. We will continue to monitor service performance over the next two (2) hours and advise should there be any change. For further assistance, please contact the Cyber Fusion Center through the MSS Client Portal or by phone: North America: 1-866-929-3528 EMEA: +41 58 317 77 77 --- [2026-07-07T05:39:14.381Z] (identified) Dear Valued Client, The Kudelski Security Cyber Fusion Center continues to review the situation regarding the service incident. We will provide further updates as they become available. Should you need further assistance, please reach out to the Cyber Fusion Center by using the MSS Portal or by phone: North America: 1-866-929-3528 EMEA: +41 58 317 77 77 --- [2026-07-07T02:44:21.956Z] (identified) Dear Valued Client, The Kudelski Security Cyber Fusion Center has identified a service degradation due to a significant influx of events on the EMEA ingestion pipeline which may result in delays in processing. Our teams are actively reviewing the situation and will ensure all events are processed as quickly as possible. We will provide further updates as they become available. Should you need further assistance, please reach out to the Cyber Fusion Center by using the MSS Portal or by phone: North America: 1-866-929-3528 EMEA: +41 58 317 77 77